spree-typescript-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is to fetch live documentation pages/announcements from spreecommerce.org (public web content) and inspect GitHub/npm pages, which are outsider-authored free text that could be ingested into the agent’s LLM context via the “Fetch live docs” steps at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SDK is explicitly for e-commerce and includes payment-specific operations: creating payment sessions (createPaymentSession), completing checkouts (checkout.complete) which trigger order/payment processing, idempotencyKey support to avoid double-charging, and guidance about publishable/admin API keys. These are payment-gateway–level capabilities (i.e., designed to initiate/complete financial transactions), so the skill grants direct financial execution authority.