famulor-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill interfaces with Famulor via an MCP server and tools that read communication history, emails, and support messages where outsiders can submit arbitrary text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages billing, balance, transactions, invoices, and credit transfers through its hosted MCP server (SKILL.md:62, 86, 115-119), which constitutes direct financial operations (purchasing numbers, credit transfers, billing). These routes are accessed via an authenticated MCP server using OAuth or API key credentials (SKILL.md:25), establishing independent service authentication/authorization.