ns-project-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests and processes unstructured user-pasted text such as transcripts, briefs, Slack messages, and meeting notes in multiple phases and modes (e.g., Phase 0 Intake, meeting digest, and NL-to-workflow parser).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill is a project management and planning assistant (ns-project-manager) that handles requirement intake, prioritization, PRDs, schedules, and commercial estimation/budgets (including Function Points and pricing). While it references a "commercial budget" and cost/price calculations (e.g., function point pricing and commercial proposals), these are indirect estimation and documentation artifacts rather than direct payment execution (such as moving, trading, or charging money). Therefore, this is an indirect financial operation.