refunds-and-disputes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Dispute and refund webhook handlers ingest req.body (webhook event data) from inbound HTTP requests at runtime, meaning an outsider can submit free text into that payload path.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes payment gateway operations: it documents and shows code calling client.refunds.create (full and partial refunds), notes "Refunds are initiated by you via the API," and includes API client construction with a bearer token. These are direct payment/refund actions that move money (financial execution).