push-inventory-collector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to read API specifications, documentation, and redacted requests and responses provided by the user/outsider during inventory and authentication collection (e.g., in SKILL.md Step 2 and Step 3).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill generates a collector script that uploads inventory asset ZIPs via POST /push and finishes/commits scans via POST /commit to MuleSoft Anypoint endpoints. This constitutes an indirect financial/administrative operation (submitting billable usage/inventory data for downstream handling). Since it's an indirect operation, the control test does not apply.