promo-code-system

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with a payment gateway (Stripe). It defines API endpoints that create and verify checkouts (POST /api/create-checkout, POST /api/verify-payment), shows code to adjust Stripe line item amounts (unit_amount), handles $0 checkouts vs Stripe flows, stores promo metadata and stripe_session_id, and even includes Stripe test card numbers and a dedicated references/stripe_integration.md. These are specific, payment-gateway operations (creating/manipulating checkout sessions and payment verification), not generic examples, so the skill grants direct financial execution capability.