subcontractor-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). High likelihood: the runtime workflow includes collecting and ingesting contractor-provided free text (e.g., W-9/W-8 form data and onboarding details, time/deliverable entries, invoice/invoice notes, and post-project quality feedback) into the agent’s LLM context, which is outsider-authored content from contractors/freelancers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes payment processing and integrations with payment platforms (ACH/wire, Bill.com, Ramp, Wise, Deel), a "payment approval workflow" and "smart payment scheduling: Contractor invoices → automated approval + payment." It names specific payment services and automation to execute contractor payments, which are direct financial execution capabilities.