wordpress-woocommerce-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text at runtime via WordPress AJAX endpoint wp_ajax_ai_product_question in Phase 5 ($question = ... $_POST['question']) and sends it to wp_ai_client_prompt($prompt) for LLM generation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references and invokes payment gateway integrations (Stripe and PayPal) and includes actions to "Configure Stripe" and "Set up PayPal" as part of payment integration. These are specific payment gateway integrations (Stripe, PayPal), which meet the criteria for Direct Financial Execution Authority.