orchestra-auto-zh

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses inbox-loop.sh and check --wait to monitor and consume messaging queues and worker communications, exposing the agent to outsider-submitted free text (questions, status updates, and messages).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents an orchestration workflow ("Orchestra Auto") that coordinates workers to edit repositories, create pull requests, and automatically merge them when gates pass. This constitutes indirect financial/operational activity (creating and merging PRs / managing software development tasks), but no direct financial operations (transfers, charges, refunds, or payment processing) are established. Therefore, the financial-security exposure is classified as indirect, which evaluates to medium severity.