subscription-fullstack

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to manage payments and subscriptions via Stripe (a payment gateway). It contains direct Stripe API calls that create and modify billing state and can cause money flow or change billing behavior, including:
• stripe.checkout.sessions.create (create checkout sessions to charge customers / start subscriptions)
• stripe.customers.create (create/manage customer objects)
• stripe.subscriptions.retrieve and stripe.subscriptions.update (read and modify subscription state, including cancel_at_period_end)
• stripe.billingPortal.sessions.create (create sessions that let users update payment methods / change plans)
• Handling invoice.payment_succeeded and invoice.payment_failed webhooks (acting on successful/failed charges) These are payment-gateway operations whose primary purpose is to move money, manage billing, and control subscription billing lifecycles. Therefore this skill grants Direct Financial Execution Authority.