nexudus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent queries user-specific coworking member APIs (deliveries, visitors, messages, and community boards) which can contain outsider-submitted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill supports booking coworking space resources via create_booking(..., preview_only=False) which commits bookings that may incur charges (priced via preview_only=True). This constitutes a direct financial purchase/booking operation. Access is authenticated via user portal credentials (JWT bearer token from login), establishing independent service-level authentication control.