transactional-email

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The schema URL points to a GitHub Gist owned by a personal user account rather than a recognized first-party organization, making it an unverifiable runtime external dependency with weak provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill describes how to write and send transactional emails using Cloudflare Workers and the Cloudflare API (send_email binding and cloudflare SDK). Sending transactional emails (such as notifications, plan changes, or welcome messages) constitutes an indirect financial or billing-related operational workflow (communicating bills, subscription plan changes, and notices), but does not execute direct money transfers, charges, or trades. As an indirect financial operation, it falls under the medium tier.