netsuite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to read and write accounting data such as invoices, bills, and payments via Apideck's Accounting API, which ingests third-party business records and outsider-authored transaction data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill integrates NetSuite via Apideck's Accounting unified API to read, write, or reconcile invoices, bills, and payments. This constitutes indirect financial operations (creating bills/invoices, tracking financial usage/records). Indirect operations do not require direct control evaluation.