german-taxes-elster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests external documents such as vendor invoices and ELSTER inbox messages which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill prepares German tax returns and forms to be submitted through Mein ELSTER using a certificate. Tax preparation and indirect filing creation (submitting data via forms) constitute indirect financial operations (creating bills/invoices/tax filings for downstream handling by the tax office). No direct money transfers, charges, or trades are performed by the agent, and every submission requires human approval as documented in the workflow guidelines.