coupon-promotion-audit

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and instructs use of Stripe MCP (a payment gateway) via OAuth or restricted key and references specific Stripe API calls (e.g., stripe_api_search, stripe_api_details, stripe_api_read, GetMcpTools). It also lists operations against coupons, promotion codes, and subscriptions (GetCoupons, GetPromotionCodes, checking discounts) — all specific payment-gateway integrations that constitute direct financial execution capability.