framework-adapters

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Webhook handler routes in the required runtime workflow ingest outsider-authored JSON body/payload from incoming requests (e.g., app/api/webhook/route.ts POST Webhooks({ onPayload })), which can carry indirect prompt-injection strings for the agent to read/parse at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payments integration for "Dodo Payments" and exposes adapter handlers that create checkout sessions and customer-portal sessions, require bearer API keys, and call payment APIs (e.g., Checkout(...), CustomerPortal(...), dodo.checkout.createSession). These are specific payment gateway operations (creating payment sessions and managing customer portal links) — i.e., direct financial execution capability.