iblai-vibe-billing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The /iblai-vibe-billing runtime renders BillingTab, which calls tenant/admin RBAC-gated endpoints for “Agent-caps list” and financial stats, meaning outsider-authored content can enter via whatever user-controlled/free-text fields back those records (e.g., agent names or other editable strings) when the UI loads them.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements billing and payment flows: it integrates with Stripe-hosted checkout/portal (plan upgrades, manage billing), supports "Add Credits" that charge the payment method on file, and exposes data-layer mutations/hooks that trigger auto-recharge, create Stripe customer portal sessions, and renew subscriptions. These are specific payment gateway operations capable of moving money.