sumsub-integrate-travel-rule

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow includes processing incoming webhook events and API requests containing outsider-authored free text such as applicant and counterparty details.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents integration for Travel Rule data exchange over cryptocurrency transfers involving VASPs and unhosted wallets via API calls (such as submitting transactions, cancelling, and confirming ownership). This constitutes an indirect financial operation (creating/submitting regulatory compliance data and transaction states for downstream settlement/handling). Therefore, it falls under the indirect operation category.