hitpay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill provides integration code and documentation for the HitPay payment gateway, including setting up webhook handlers that process incoming notification payloads.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit integration instructions, API endpoints, and code examples for the HitPay payment gateway, which handles online payments and refunds via specific APIs (https://api.hit-pay.com/v1/payment-requests and /refund). This matches the criteria for Direct Financial Execution (Risk: 1) due to explicit usage of payment gateway APIs.