sf-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s REQUIRED workflow includes multiple runtime web-fetches (“Web-fetch the SCAPI Shopper Orders reference…” and “Web-fetch the Salesforce Order object reference…”), which pulls public web content into the agent’s context as readable documentation text, creating an indirect prompt-injection exposure path.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about order processing and includes payment processing actions and integrations: it references PaymentInstrument, instructs to "Capture payment authorization synchronously; handle failures with retry logic," and mentions an "Apex PaymentGatewayAdapter" (a specific integration point for payment gateways). These are explicit payment execution responsibilities (authorizing/capturing payments and integrating with payment gateway adapters). Even though it doesn't name Stripe/PayPal, the skill is specifically designed to perform payment operations as part of order management, which constitutes direct financial execution capability.