developer-churn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads user-provided churn inputs such as “support ticket history for churned users” and “exit survey data (if any),” meaning outsider-authored free text from those systems can be ingested before any specific item selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references payment gateways and payment-management tools (e.g., "Stripe", "PayPal", "ACH", "Profitwell Retain") and describes dunning/payment-recovery actions (card updater services, payment links, allowing alternate payment methods). These are specific financial tools/capabilities for handling payments, so it grants Direct Financial Execution authority.