dynamics-365-crm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill manages Dynamics 365 CRM records and activities like emails and support cases via the Dataverse Web API, which can ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages CRM records (leads, opportunities, accounts, quotes, orders, invoices, cases) via the Dataverse Web API. Creating invoices or orders in a CRM system is classified as indirect financial exposure (creating bills or commercial records for downstream handling). The skill implements API authentication using Microsoft Azure AD ClientSecretCredential (SKILL.md:91-95), which satisfies the qualifying independent access control requirement for indirect financial operations.