verify-document

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow ingests user-provided documents (such as invoices or payslips from external sources) which may contain outsider-authored text, examined via the Stipple API.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill utilizes an external API endpoint (stipple.sh) for document verification instructions and runtime execution, classified as common/reputable unofficial provenance resulting in a medium tier.