stripe-integration-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime path app/api/webhooks/stripe/route.ts ingests outsider-authored free text via await req.text() and passes it to stripe.webhooks.constructEvent(...) after reading the stripe-signature header, meaning any caller who can POST webhook payloads can supply the LLM-readable body (the webhook JSON string).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payment integration: it initializes a Stripe client with a secret key and uses Stripe APIs to create checkout sessions, create/update subscriptions (including proration), report metered usage, handle webhook events with signature verification, and create billing portal sessions. These are specific payment gateway operations that can move or manage money and therefore constitute direct financial execution capability.