quickbooks-online-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves handling QuickBooks webhooks, which ingest event notifications and entity data from an external API service.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill details QuickBooks Online API integrations, which include financial operations such as creating invoices, recording payments, and managing accounts/customers. These are indirect financial operations as they create bills, invoices, and accounting records for downstream handling. Per the guidelines, indirect financial operations evaluate to medium severity.