qonto-invoice-chaser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads client names, transaction labels, and invoice details from Qonto, which can contain outsider-authored text (such as custom transaction labels or client-supplied notes on invoices).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an invoice-chasing workflow connected to Qonto, with tools including create_payment_link, list_client_invoices, and mark_client_invoice_as_paid (lines 7, 15). Marking invoices as paid and creating payment links are indirect or direct payment operations. However, Qonto API operations inherently require authenticated service API credentials (as documented in standard Qonto MCP integrations and system prerequisites), which constitutes independent access control gating the platform service.