funding-program-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow lists and reads external funding applications and comments submitted by untrusted applicants and reviewers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages funding programs, applications, and payout/disbursement records (e.g., creating disbursement records at /v2/payouts/disburse). Creating disbursement records constitutes an indirect financial operation (submitting disbursement data/records for downstream queueing/handling by administrators and multisig execution). Indirect financial operations map to the medium severity tier.