saleor-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The REQUIRED workflow includes runtime web-searching and fetching Saleor documentation pages (e.g., “Web-search site:docs.saleor.io …” and “Fetch https://docs.saleor.io/docs/developer/orders”), which ingests outsider-authored free text from public web content into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly references Saleor GraphQL mutations that perform payment-related actions, including the distinction between "grant refund" and "send refund" and the specific operation "transactionRequestAction with REFUND" to process the actual refund via a payment app. That is a concrete API for executing financial transactions (refunds). Because it includes explicit payment-processing mutations (refund transaction) rather than only generic operations, it constitutes direct financial execution capability.