recur-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to implement webhook handlers that consume incoming webhook event payloads submitted by outsiders over HTTP POST requests.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents webhook handling for payment and subscription events (such as checkout.completed, order.paid, invoice.paid, and refund.created) from the Recur billing service. This involves processing payment notifications, recording recurring revenue, extending access, and handling subscription state changes. Such notification handling and database tracking constitute indirect financial operations (submitting billing usage / handling payment state). Because the operations are indirect, direct access-control evaluations do not apply.