quickbooks

Warn

Audited by Snyk on Oct 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow uses Apideck's Accounting API to read and write accounting data such as invoices and bills from QuickBooks, which can contain user-submitted or third-party free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill integrates with QuickBooks via Apideck's Accounting unified API to read, write, and reconcile invoices, bills, and payments. These operations create bills and invoices or submit financial data, representing indirect financial operations. Per guidelines, indirect financial operations are assessed at the medium tier.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 19, 2026, 05:21 AM
Issues
2