customer-billing-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses connected billing tools like Stripe and optionally mentions checking support emails or issue trackers as supporting evidence, introducing an outsider-authored text exposure risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates real customer billing workflows including processing refunds and canceling subscriptions using connected billing tools like Stripe. This constitutes a direct financial operation (refunds/charges/cancellation/settlement authorization). Although connected to Stripe, the skill instructions do not establish or document independent service-layer authentication or access controls for these payment routes; therefore, it falls under High severity.