weclapp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow interacts with Weclapp ERP data via Membrane CLI, which can read support tickets, customer notes, and messages containing outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides access to Weclapp ERP/CRM via the Membrane CLI, allowing listing, getting, and creating items such as sales orders, invoices, and purchase orders. While ERP systems deal with financial records, invoicing and order management here represent indirect financial operations (creating bills/invoices/orders for downstream processing), which are classified as medium severity.