manage-traders-and-exhibitors

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests trader applications, requests, and documents submitted by external vendors via the Ticket Fairy platform and CLI tools.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates ticket vendor management, application reviews, and invoicing (raising and sending pitch invoices and share-of-sales invoices for event traders). This constitutes indirect financial operations (billing, invoicing, and usage charging). By definition, indirect financial operations are evaluated at medium severity.