api-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly documents a passthrough proxy (https://gateway.maton.ai/{app}/{native-api-path}) used to call many external APIs (e.g., Slack, GitHub, WordPress, Notion, Gmail) so the agent will fetch and read untrusted/user-generated third‑party content from those services as part of its workflow, which could materially influence subsequent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The api-gateway skill is a passthrough proxy that explicitly lists and supports payment and financial service APIs (examples and supported services include Stripe, Square, QuickBooks, Xero, Chargebee, WooCommerce, Google Ads, etc.). It allows calling native API endpoints (all HTTP methods supported) via managed OAuth, including endpoints that can create payments, customers, subscriptions, invoices, and update ad accounts/campaigns. Although it is a general-purpose gateway, it explicitly provides direct access to payment/banking/ads APIs — i.e., concrete tools for moving money or changing ad budgets — so it meets the "Direct Financial Execution" criteria.