draft-invoice

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill queries company records using well_query_records to search for client names, which retrieves database records that could potentially contain outsider-authored company names or metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an indirect financial workflow by creating invoice records (well_create_invoice_from_data) in an accounting workspace for downstream handling and billing. It does not execute direct money transfers, charges, payments, or settlements.