ember-data-warp-drive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is the app’s data-loading via WarpDrive/Ember Data adapters (e.g., store.findRecord/query/pushPayload), which ingests raw payloads from outsider-authored sources like Firestore documents or REST/Cloud Function responses; those payloads become LLM-readable text when the agent later summarizes/uses the fetched data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The documentation explicitly references Stripe integrations: a StripeCustomerAdapter (namespace 'api/stripe'), Stripe-specific serializers/normalization, and Firebase/Cloud Functions endpoints used by "stripe". These are payment-gateway-specific adapters/serializers (not generic HTTP tools) and therefore represent explicit payment-gateway integration capable of performing financial operations.