spree-fulfillment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow processes incoming carrier tracking webhooks at POST /api/v3/webhooks/fulfillments/:integration_id, which ingest outsider-authored free text from external carrier payloads.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents fulfillment operations, shipping label purchasing (fulfillment_purchase_label_workflow, Fulfillments::PurchaseLabel), and capturing payments upon dispatch. These represent direct financial operations (purchases and charges). However, no independent access control is documented for these routes within the skill text. Therefore, it falls under direct payment operations without established qualifying controls.