just-fucking-cancel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads user-provided bank CSV exports or Plaid API transactions, which contain untrusted merchant descriptions and transaction text from external sources.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes capabilities to pull transactions via the Plaid API (which is a banking API integration) and helps users find and cancel subscriptions, utilizing browser automation for navigation. Per the core rules, Plaid API integrations and banking integrations fall under the specific financial execution criteria (Banking APIs / Payment Gateways / Financial tracking and actions).