run-event-production

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow connects to an external MCP server and reads email inboxes and call transcripts where outsiders can inject text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill involves creating and raising invoices (such as trader pitch invoices and crew meal charges) and tracking payments and purchase orders, which constitutes indirect financial operations (billing/invoicing). No direct transfer or settlement authority is executed by the agent (buyers pay in browser checkout, and bank/payout details stay in the organiser's browser as stated on lines 36-37). Therefore, it falls under indirect financial exposure, warranting a medium severity rating.