pos-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests webhook payloads from Square POS terminals (/api/webhooks/square), which contain untrusted external transaction and inventory event data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes explicit code examples using payment gateway APIs—specifically Stripe (stripe.refunds.create) and Square (paymentsApi.createPaymentRefund)—to execute financial transactions (issuing refunds for returns). Because these are explicit programmatic APIs for moving money, the skill meets the criteria for Direct Financial Execution Authority.