mobile-checkout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests a return deep-link URL’s query parameters (e.g., status and payment_id) via Linking/AppLinks/iOS application(_:open:options:)/Android intent handling, which an outsider app or attacker can supply via a crafted myapp://checkout/return?... URL.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment integration for "Dodo Payments" and contains specific payment gateway APIs and functions: creating checkout sessions (client.checkoutSessions.create), backend API key usage, webhook handling for payment.succeeded, and retrieving payments via client.payments.retrieve. These are direct financial execution capabilities (payment gateway operations), not generic tooling.