nhcx-payer-claim

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow processes incoming claim submissions and tasks from hospital networks via NHCX callbacks, which ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill (nhcx-payer-claim) implements a payer-side health claims exchange integration for National Health Claims Exchange (NHCX), which includes drawing down cover, processing claims, reprocessed balances, and handling payment notices and disbursements as documented in its scopes and references (e.g., SKILL.md:4, SKILL.md:75, SKILL.md:103). This constitutes an indirect financial operation (submitting bills, processing claims, and managing payment instructions for downstream execution). Per evaluation guidelines, indirect financial operations are assessed at the medium tier.