exact-online-uk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves reading accounting data such as invoices and bills from Exact Online UK via Apideck, which processes user-submitted accounting records and free-text fields.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents integration with Exact Online UK via Apideck's Accounting API, which supports writing invoices, bill payments, and journal entries. However, this falls under read/write/reconcile operations on accounting records (indirect financial operations such as creating invoices or billing records) rather than direct funds transfer, purchase, or charge execution. No direct financial instruction or payment routing is executed.