veto

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow consumes client records, invoice descriptions, and transaction labels returned by Qonto MCP tools, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates banking and financial transaction capabilities through the Qonto MCP integration. It features specific tools for creating invoice-linked payment pages (create_payment_link), managing client invoices and payment statuses (change_client_invoice_status, mark_client_invoice_as_paid), and listing financial transactions (list_transactions), which are explicitly designed for financial operations and managing accounts receivable.