wordpress-woocommerce-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow’s runtime LLM context is fed by user-supplied free text from the WooCommerce AJAX endpoint wp_ajax_ai_product_question (the question field from $_POST['question']), which is outsider-authored customer input not chosen by the operating user.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes payment gateway integration and references specific payment tools/skills: "payment-integration", "stripe-integration", and "paypal-integration" (with copy-paste prompts like "Use @stripe-integration to integrate Stripe payments" and actions to configure/test payment flows). Those are specific payment gateway integrations (Stripe/PayPal), which constitute direct financial execution capability under the criteria.