gpd-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow interacts with Google Play Developer Console and consumes user reviews via gpd reviews list, which can contain untrusted customer-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit tools/commands for managing Google Play monetization, product pricing, and issuing subscription refunds (gpd purchases subscriptions refund, gpd monetization baseplans migrate-prices), which directly trigger financial operations and affect real money/transactions.