forge-suite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves reading inbound email threads and replies via the Salesforge core API, which ingests outsider-authored text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates the Mailforge API, which contains specific endpoints for purchasing domains (POST /domains, /domains/transfer, /domains/pre-warmed) and managing billing/top-ups (/adjust-mailbox-topup-amount, autorenew), thereby granting direct financial execution authority via its tools.