spree-shipping-fulfillment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s REQUIRED workflow includes fetching live documentation from https://spreecommerce.org/... at runtime (“Fetch live docs” step 1), which is public web content authored by outsiders and will be ingested as readable text into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The doc, while primarily about shipping/fulfillment, explicitly includes code and workflow for creating and executing reimbursements that "create Refunds and/or StoreCredits" and notes "Refund (against original Payment)". The Reimbursement.perform! call is a specific function that executes refunds (financial transactions) within Spree, i.e., direct financial execution capability. Although it doesn't name external gateways, it provides a concrete API to trigger refunds, which is a money-moving operation.