follow-event-type-playbooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow connects an MCP client to an external server and calls search_guides to ingest guides and documentation written by third parties.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill describes setting up event ticketing, defining ticket prices, deposits, and table bookings (indirect financial operations such as creating items/bills/invoices for downstream handling or managing event configuration). It does not execute direct financial transfers, charges, or buyer checkouts. Therefore, it constitutes an indirect financial operation, placing it at the medium tier.