gplay-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow looks up and refunds Google Play orders by order ID provided by a human or buyer complaint, which involves processing external buyer-associated data and order records.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly defines capabilities and commands for executing financial transactions, specifically issuing refunds ("money-moving, irreversible") via the gplay orders refund command, which directly interacts with payment/commerce systems to move money.