inttegro-resolve-customer-case

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses tools like list_messages and get_message to ingest customer support messages, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit financial execution tools such as pay_order, create_refund, and prepare_order_payment which are specifically designed for processing payments and managing refunds, meeting the criteria for Direct Financial Execution Authority.