a1-yandex-kit-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill manages Yandex KIT e-commerce store orders and reads order data, delivery notes, and customer information from the Yandex KIT REST API.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages store orders, statuses, customers, gift cards, and delivery documents via the Yandex KIT REST API, including retrieving payment links for buyers to pay. This involves reading order data, confirming/canceling orders, and retrieving payment links rather than directly processing charges, making it an indirect financial operation or order-management workflow.