card-funding-risk

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires a Stripe MCP connection and instructs use of specific Stripe API calls (GetMcpTools with server "user-Stripe", stripe_api_search / stripe_api_details / stripe_api_read). Those are payment-gateway integrations (Stripe) and include operational actions (reading payment methods, subscription status, and Radar blocking/webhook reject options), i.e. a tool specifically designed to operate on a payment platform. This meets the criteria for Direct Financial Execution.