pelecard-payment-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Pelecard payment gateway integration workflow consumes inbound server-to-server webhook callbacks (IPNs) sent to the merchant's ServerSideGoodFeedbackURL containing outsider-submitted parameters such as ParamX, ShopNo, and transaction metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation is explicitly designed for integrating the Pelecard payment gateway, containing specific tools, API endpoints (gateway21.pelecard.biz/PaymentGW/init, PaymentGW/GetTransaction), and functions to execute financial transactions, handle payment tokens, issue refunds, and process Israeli Shva network card-acquiring transactions.