duffel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and processes external email confirmations and messages, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill implements direct financial operations including booking flights, making purchases via Stripe Link, and processing cancellations (SKILL.md:47, 467-471, 530). Access control for payment and booking routes is established through Stripe Link payment methods and Duffel CLI authentication/validation (stripe-link payment-methods list, duffel validate-booking, duffel book) (SKILL.md:465-471, 484-487).