qonto-receipt-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads external emails and Google Drive files, which can contain outsider-authored text (indirect prompt injection).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill inventories missing receipts in Qonto accounts and attaches found receipt documents to transactions via Qonto API calls (request_attachment_upload, upload_attachment). This constitutes indirect financial operations (submitting supporting documentation for accounting/tax records). Because it is an indirect financial operation, access control requirements do not apply under rule 2 and 3.