stripe-integration-review

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on Stripe (a payment gateway) integration: it searches for Stripe constructors and API usages (e.g., "new Stripe", "stripe.subscriptions", "stripe.checkout") and checks Stripe-specific behaviors (apiVersion, idempotencyKey, webhooks, proration, secrets). Per the policy, the presence of specific payment-gateway APIs (Stripe) qualifies as a direct financial-execution capability risk, even though the skill is an audit/review tool rather than a transaction UI.