stripe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Stripe API integration to manage customers, subscriptions, and payments where customer-submitted metadata or fields could contain untrusted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly integrates with the Stripe API to manage payments, process charges, create payment intents, issue refunds, and handle invoices and subscriptions, which constitutes Direct Financial Execution Authority via a dedicated payment gateway API.