lexio-rent/lexio-api
Build integrations with the Lexio Rent API v1, the REST API of the Lexio vehicle rental management software (availability, quotes, rentals, pick-up and return, payments, fleet, event sync).
97%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill integrates with the Lexio Rent API, which includes direct payment and financial operations such as recording payments (`POST /rentals/{rentalId}/payments`) and processing refunds (`payments.refund`) (SKILL.md:39, SKILL.md:77). Access control relies entirely on an API key provided by the user/rental company without independent server-side user or checkout-level authentication checks enforced at execution time beyond the provided bearer token (SKILL.md:20, SKILL.md:25). Therefore, it falls under direct operations without qualifying independent access control.
Where we found it
POST /rentals/{rentalId}/payments
command · 2 sites
The skill documents API endpoints for recording payments and processing refunds, but these are documented API operations for an agent to call, not operations the skill itself executes.
SKILL.md
77
POST /rentals/{rentalId}/payments
SKILL.md
39
payments.refund
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow involves syncing changes through a GET /events feed and reading event data from an external API, which could ingest outsider-submitted reservation or rental notes/data.
Where we found it
api.lexio.rent
domain · 3 sites
The skill is documentation for an agent; it does not itself fetch from api.lexio.rent at runtime
SKILL.md:3
SKILL.md:11
SKILL.md:102
- Audited
- Security analysis