sumsub-create-kyt-rules

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow calls GET on Sumsub KYT rules (/resources/api/agent/tm/rules/-/installed), which retrieves server-stored rule configurations that can contain outsider-submitted titles or conditions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill configures Sumsub KYT (Know Your Transaction) monitoring rules, tags, applicant risk scoring, risk level thresholds, and client lists via API calls. It performs rule creation, modification, and tag/risk assessment settings management. These are configuration and compliance monitoring operations rather than direct financial transfers, charges, purchases, trades, or settlement authorizations. Therefore, this represents an indirect financial exposure (managing transaction monitoring and risk rules).