deploy-pipeline

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The prereqs include a direct installation command "curl -fsSL https://composio.dev/install | bash" which fetches and immediately executes remote code (installing the required composio CLI), so this external URL is a runtime dependency that executes remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes Stripe payment operations (e.g., STRIPE_CREATE_PRICE and STRIPE_UPDATE_PRODUCT) and shows concrete commands and code that create/update Stripe prices/products. Those are payment-gateway actions that modify billing/pricing, which constitute direct financial execution authority.