payment-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for this skill ingests outsider-authored free text via payment webhook HTTP request bodies (e.g., Polar: POST /webhooks/polar reads await request.text() and parses JSON payload; Creem: app.post('/webhooks/creem'...) reads req.body.toString() and JSON.parse(payload)), which an outsider can influence by sending crafted webhook payloads.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment-integration toolkit listing payment gateways (SePay, Polar, Stripe, Paddle, Creem.io), APIs/endpoints, webhook handling, and contains concrete code to create checkout sessions (stripe.checkout.sessions.create) and manage transactions. These are specific financial execution capabilities (payment gateways and transaction creation), not generic tools.