failure-aware-enhancements-code-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The workflow’s RAG step explicitly “search[es] documentation, codebases, or known examples” and “retrieve[s] … documentation … if accessible,” which at runtime can involve fetching outsider-authored web content (public docs/pages) and injecting their readable text into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a concrete Stripe integration example showing deprecated stripe.Charge.create() and a corrected implementation using stripe.PaymentIntent.create(...) with amount, currency, payment_method, confirm, etc. That is a specific payment-gateway API call (Stripe) capable of initiating payments, so the skill contains explicit financial-execution functionality rather than only generic code advice.