PayPal

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes a frontend runtime script tag that loads and executes remote JavaScript from https://www.paypal.com/sdk/js?client-id=YOUR_CLIENT_ID&currency=USD, which is fetched at runtime and executes third‑party code required for the payment UI.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a PayPal integration for payments, subscriptions, OAuth token management, webhook verification, order capture/authorization, and mentions the Payouts API. Those are specific payment gateway operations (sending/receiving money, managing payouts and subscription billing), not generic tooling, so it grants direct financial execution capability.