tax-compliance

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references Stripe MCP and specific Stripe-related operations (GetMcpTools, CallMcpTool, GetTaxSettings, checking subscriptions/invoices, amounts in cents). These are specific payment-gateway APIs/tools (Stripe) rather than generic interfaces, and thus constitute direct financial execution capability (even if read-only by default the presence of CallMcpTool and instructions about confirming before writes indicates the ability to perform Stripe operations).