brex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill integrates with Brex via Membrane to manage financial data, interacting with account records, vendor names, and transaction memos which can contain outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation of the Membrane CLI from npm via npm install -g @membranehq/cli@latest, which is a common/reputable unofficial package transporter/source for the Membrane integration framework (tier medium).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with Brex, a corporate credit card and spend management platform, and explicitly lists actions such as Create Transfer, Create Card, Update Card, and proxy request capabilities that allow executing financial transactions, moving money, and issuing/managing credit cards and budgets.