perfex-payment-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path ingests outsider-authored free text via the webhook controller: My_gateway_webhook::handle() reads php://input (external gateway POST body) into $payload, then parses it with json_decode and uses fields from it (e.g., metadata.invoice_id, transaction_id)—this is outsider-provided content fed into the agent/LLM context through the application’s processing flow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically and explicitly designed to implement payment gateway functionality: it defines a process_payment($data) method that calls gateway APIs (e.g., build charge, redirect to checkout), handles encrypted API keys/secrets, references Stripe/PayPal, and includes webhook handling that verifies signatures and records payments via the application's payments_model. These are direct payment operations (payment gateway integration and recording of transactions), not generic tooling, so it grants Direct Financial Execution authority.