gumroad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow calls Gumroad’s own API endpoints (e.g., /v2/products, /v2/sales, /v2/user) using the user’s bearer token; the LLM ingests the API response JSON (outsider-authored content from a third-party vendor), which can include free-form fields like product descriptions/names and customer email.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The Gumroad skill is an e-commerce/payment integration with specific endpoints and capabilities related to sales and payment management. The documentation explicitly describes retrieving sales, creating/managing products and offer codes, and—crucially—issuing refunds. Those are concrete payment-related actions (refunds move money/adjust payments) and thus constitute direct financial execution authority rather than a generic toolset.