invoiced

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill integrates with Invoiced via the Membrane CLI, allowing the agent to read invoices, customers, and subscriptions, which can contain outsider-authored invoice notes or customer data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with Invoiced, which is an accounts receivable and invoicing platform. It provides explicit capabilities to create and manage payments (create-payment, update-payment), invoices, and subscriptions via CLI actions and API proxying. These functions constitute direct financial execution capabilities (payment gateway / billing / invoicing operations).