operate-ai-employees

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to operate a platform account by interacting with tasks, executions, and connected app actions, which can process external content or data if executed against monitored user-generated workflows.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an AI employee platform via CLI commands (dozaldevs), mentioning managing "usage, bills" (SKILL.md:3, SKILL.md:92) as part of account administration. This constitutes reading and managing service subscriptions or billing views rather than executing direct financial transactions, payments, or bill creation. Therefore, the financial operation is indirect (service usage/bills review), and no direct payment processing or transfer route is established.