portaly-payment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow consumes signed webhook callbacks sent to callbackUrl (e.g. creator_subscription.checkout.completed, payment success/failure, renewals, refunds, and lifecycle events), which contain outsider-submitted transaction and customer data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill integrates Portaly Payment hosted checkout, allowing the agent to make direct API calls for managing checkout sessions, subscription cancellation/resume, manual completion, and order refunds using API keys. These constitute direct financial operations. Access control is enforced independently by the Portaly Payment service via bearer tokens and API keys (Authorization: Bearer). Therefore, direct operations with qualifying independent access control yield a medium severity.