product-photo-studio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads external version notices from beatra.ai sources.json, which is a low-risk active fetch of vendor documentation/metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations via prepaid credits and a bearer token with wallet:spend scope for paid API calls on the Beatra service (mcp.beatra.ai). These direct payment operations rely on user prompts/approvals and an OAuth device login, rather than independent access validation enforced by the service or execution layer for each payment route. Therefore, it is a direct operation without established qualifying control.