app-store-submission-weapon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow includes “paste the full rejection text including reason codes” (outsider-authored by the App Store/Google Play review team) which is then read by the LLM at runtime; other referenced files are static guidance or templates, not runtime-injected web text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes In‑App Purchase / subscription setup and references payment APIs and functions (StoreKit 2, the .finish() transaction call, and Google Play Billing Library 7). Those are specific payment-related APIs used to complete and manage financial transactions in apps, which constitutes direct financial execution capability.