apple-appstore-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The runtime workflow fetches public RSS/JSON customer review content from itunes.apple.com (e.g., https://itunes.apple.com/us/tw/rss/customerreviews/.../json), then parses and concatenates outsider-authored review text (.title.label and .content.label) into OUTPUT, which is emitted as free text for the agent/LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes APIs and code to create and manage in‑app purchases and subscriptions and to set and change pricing (e.g., POST /v2/inAppPurchases, inAppPurchasePriceSchedules, PATCH /subscriptions/{id} with inline prices, subscriptionPrices, subscription price equalizations, finding/setting price points, etc.). It also includes RevenueCat integration to create apps/products using App Store Connect credentials. These are specific, purpose-built actions that modify product pricing/monetization and can directly affect revenue collection — i.e., direct financial execution related to in‑app billing. Therefore it grants direct financial execution authority.