lark-reimbursement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads source documents, receipts, and attachments (such as Lark docs and uploaded files) which can contain outsider-authored free text in expenses or shared documents, but does not monitor an incoming third-party messaging feed or issue tracker.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill assists in preparing, verifying, and submitting expense reimbursement requests and matching them against purchase approvals via Lark tools (lark-reimbursement, lark-approval). This creates reimbursement claims for downstream handling, constituting an indirect financial operation (reimbursement submission). Therefore, the financial-security exposure tier is medium.