travel-expense-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes OCR receipt processing where the agent ingests receipt text extracted from user-provided receipt images (outsider-authored free text from the receipt content), which then becomes LLM-readable context for parsing/validation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed for expense reimbursements and accounting actions that move money: it says it will "generate payment files" and "process payment: Generate reimbursement and post to GL", and includes concrete integration steps and code to "generate journal entries" and "post to Odoo" (including crediting employee payable and updating reimbursement status). Those are specific, financial-execution operations (creating payment files and posting financial transactions), so it grants direct financial execution capability.