saas-scaffolder

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill scaffold explicitly integrates a payment gateway (Stripe). It includes a lib/stripe module, env vars for STRIPE secret/publishable keys and webhook secret, database fields for stripe customer/subscription IDs, and concrete server routes that call stripe.customers.create and stripe.checkout.sessions.create (creating customers and initiating checkout subscriptions). These are specific payment API calls that enable sending financial transactions/creating subscriptions, so this is Direct Financial Execution Authority.