flowra

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow configures agents and workflows that ingest inbound email, chat, and webhook payloads from catalog apps like Gmail and Slack, which are outsider-authored free text sources.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an automation and agent platform (Flowra) that can connect to catalog apps and execute tools, including workflows with human approval gates on actions like payment (SKILL.md:88: human_wait / humanApproval on send/delete/pay). However, the skill itself is an integration/routing wrapper for configuring and orchestrating hosted agents, workflows, and tools via API/MCP/CLI rather than directly executing financial transactions, making it an indirect utility for workflow automation. Therefore, financial operations are indirect.