pancake-crm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill integrates with Pancake CRM via Membrane CLI, allowing the agent to read records and data which may contain outsider-submitted content (such as customer-entered leads or notes).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill integrates with Pancake CRM via Membrane CLI, mentioning that Pancake CRM helps users "create invoices, and send proposals" (SKILL.md:17). Creating invoices is an indirect financial operation (creating real bills/invoices for downstream handling). According to the financial security rules, indirect financial operations are classified at the medium severity tier.