peppol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Peppol skill monitors incoming invoices, inbox feeds, and inbound emails where outsider-authored document contents and email messages are ingested at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a CLI tool for managing e-invoices via the Peppol network (creating, validating, sending, and receiving invoices). Creating and sending invoices constitutes indirect financial exposure (submitting billable invoices/usage for downstream handling). Authentication is handled via API key (PEPPOL_API_KEY) or interactive login.