btcpay-server

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses Membrane CLI to interact with BTCPay Server, where invoices, payment requests, and store records can contain user/customer-submitted free text ingested via the API or webhooks.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill integrates with BTCPay Server via the Membrane platform to manage invoices, payment requests, pull payments, and payouts (e.g. SKILL.md:120-135). Creating invoices, payment requests, and pull payments or handling payouts constitutes direct cryptocurrency payment/settlement processing (Direct operation type). While Membrane handles authentication and session connection setup (SKILL.md:38, SKILL.md:73), there is no independent authorization or verification mechanism enforced at checkout or payment execution time to gate financial transfers or invoice/payout creation beyond standard API access/connection provisioning. Therefore, direct financial operations are present without independent service-layer transaction approval controls.