recoup-content-connect-fans

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads fan profiles and records via API (GET /api/sites/{siteId}/fans), which contain display names and email addresses originating from third-party fans who connect their Spotify accounts.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill configures fan connection widgets and checks for an existing paid subscription plan (402 response handling mentions that the workspace needs an eligible paid plan and to "Use the existing customer checkout path"), but does not directly execute or initiate payments, transfers, or charges. This constitutes an indirect financial or billing-adjacent workflow check, placing it in the indirect financial scope.