contract-metadata-extraction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries contract records and document text from ServiceNow tables (clm_contract_doc, ast_contract), which store untrusted or outsider-authored contract text and vendor agreements.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill extracts and processes contract metadata and obligations within ServiceNow (CLM), involving financial terms, costs, and payment schedules as read/write attributes on contract records. It does not initiate direct financial transfers, charges, or payments, making it an indirect financial operation (or information/record-management task).