payment-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the skill’s webhook verification/handling scripts (e.g., scripts/sepay-webhook-verify.js and scripts/polar-webhook-verify.js) ingest outsider-authored free text from incoming HTTP webhook payloads/headers (e.g., payload.content / req.body), which are not authored by the operating user.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed for payment processing and monetization: it provides integration with payment gateways (SePay and Polar), API/SDK references for transactions, endpoints for bank accounts and virtual accounts, bank transfer automation, VietQR/NAPAS QR payments, checkout flows and a "checkout-helper" script to generate checkout sessions, subscription and usage-based billing, and Merchant-of-Record functionality. These are specific tools and APIs whose primary purpose is to move/manage money (payment processing, bank transfers, subscriptions), so it grants direct financial execution capability.