b2b-markets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Recipe 3 “Webhook handler” ingests the webhook HTTP request body (JSON-parsed into companyContact = JSON.parse(body)) and may pass fields like email, first_name, and last_name into downstream logic at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes Shopify Admin GraphQL mutations and features that perform monetary actions: creating/ completing draft orders with paymentTerms (invoice/NET terms), creating orders using vaulted cards (recurring payments), and creating app charges (appSubscriptionCreate). It also lists required scopes like write_draft_orders and read_customer_payment_methods. These are specific payment/charging operations (i.e., direct financial execution), not generic API or browser tools.