marketing-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests public web pages, review sites, and social platforms like Reddit during market and competitor research.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill outlines instructions for marketing playbooks that reference a spend-gate skill and paid API/credit operations ("credits exactly as GooseWorks quotes them, and the marketer's yes before any paid call"). However, it acts as a high-level router/guide for marketing playbooks and defines delegation to subordinate skills and gates rather than directly executing financial operations itself. Additionally, direct payment operations governed by the skill specify independent access control/approval gates ("the marketer's yes before any paid call", spend-gate). Therefore, this constitutes a direct financial operation with qualifying independent approval control, placing it in the medium tier.