affiliate-payout-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves an agent reading uploaded spreadsheets, CSVs, or text exports provided by the user, which can contain outsider-authored text such as affiliate names, order descriptions, or notes.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill performs an affiliate commission payout audit (indirect financial operation: reviewing calculation accuracy, reconciliation, and reporting findings/holds before money is disbursed by downstream processes). It does not execute direct financial transactions itself. Therefore, it is an indirect financial operation.