sending-transactional-emails

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow guides the agent to ask the user for HTML, a screenshot, or a website URL of an existing email/template when migrating from another provider or setting up branding, which are user-supplied/external inputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents sending transactional emails via API/SDK calls (SKILL.md:58-60) and configuring templates and workflows. Sending emails is an indirect financial/operational activity (billing and quotas are mentioned at SKILL.md:31,49, but no direct monetary transfer, charge, or purchase is executed).