agentic-security-scanner

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with Stripe (payment gateway) and includes commands that call the Stripe API to rotate live API keys and update CI/CD secrets. Examples and env vars show STRIPE_API_KEY=sk_live_... and a fix flow that "Rotates the key via Stripe API" (and handles webhook secrets). Because it contains a specific payment-gateway API integration and actions that modify payment credentials via the provider API, it meets the "Direct Financial Execution" criteria.