freeagent
Warn
Audited by Snyk on Oct 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow interacts with Apideck's Accounting API to read and write accounting data such as invoices and bills, which can originate from external third parties.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill integrates FreeAgent via Apideck's Accounting unified API, supporting operations such as reading, writing, and reconciling invoices, bills, and payments (indirect financial operations like creating bills or invoices). Since it involves indirect financial operations (invoices and bills), the tier is medium.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata