commissions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md describes an agent “dispute resolution workflow” where a rep disputes line items and the agent routes/reviews that dispute content, meaning outsider-authored free text from reps (on an authenticated channel) can be ingested into the LLM context at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes generating payroll files and handing off commission payouts to payroll providers (Gusto/Rippling/ADP), and describes full automation from deal close → commission calc → statement → payroll handoff. Those are specific integrations to execute payments (payroll/payment execution), which constitutes Direct Financial Execution authority.