crypto-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime when the required webhook handler reads and parses the Heleket callback JSON body (including fields like status, order_id, from, txid, and payment_amount_usd) into rawBody and bodyWithoutSign for signature verification and subsequent crediting.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly and specifically about integrating crypto payment processors and handling money: it references payment gateways (Coinbase Commerce, NOWPayments, BTCPay, Heleket), shows a lifecycle including "create invoice" and webhooks that settle payments, describes idempotent webhook processing and a call to creditUser(...), lists reconciliation fields (txid, paidAmount, merchantAmount), and discusses refunds/AML holds. These are concrete, payment-specific operations (payment gateway / crypto checkout integration), which constitute direct financial execution authority.