qonto-tax-pilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads transaction histories and invoice lists from Qonto APIs where transaction counterparty names and invoice text are controlled by external third parties (customers and suppliers), presenting a medium indirect prompt injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with Qonto banking APIs, specifically including the create_multi_transfer_request tool which initiates a financial transfer (even though it requires user 2FA/SCA approval). This grants explicit capability for financial operations (banking/payment execution requests).