recoup-internal-sales

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill workflow involves searching and researching cold prospects using Exa API and conducting research across various services, which involves low-risk ingestion of external information fetched at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The workflow manages internal sales sweeps, data aggregation, CRM updates, and outreach preparation across services like Stripe, Privy, and Attio. It performs indirect financial operations such as tracking failed payments, top-up loops, balances, and subscriptions. However, it explicitly prohibits sending unapproved emails and requires manual review for all outbound communication. There are no direct financial transfer or charge operations executed autonomously by the skill.