pricing-products-audit

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and instructs use of Stripe MCP (a payment gateway) and specific Stripe API helper calls (e.g., GetMcpTools, stripe_api_search/stripe_api_details/stripe_api_read, GetProducts/GetPrices/GetSubscriptions). This is a specific, payment-gateway integration (Stripe), so under the core rule it is considered a direct financial execution capability risk—even though the workflow appears read/audit-focused rather than creating charges, it is nonetheless a specific Stripe API integration.