qbo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads QuickBooks Online records, customer details, and invoice data via the qbo CLI, which can contain user-submitted notes, display names, and invoice descriptions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides a CLI for QuickBooks Online (qbo) supporting financial operations such as creating invoices, recording payments, voiding transactions, and creating/updating accounting entities. These actions record, update, or settle financial transactions within accounting records (indirect/recordkeeping financial operations). Authentication is managed via Intuit OAuth 2.0 and API credentials stored in the system keychain or config.