stripe-hardened

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly configures a runtime MCP SSE endpoint (https://mcp.stripe.com/v1/sse) and instructs installing/running the @stripe/mcp package via npm/npx (e.g., npm install -g @stripe/mcp / npx -y @stripe/mcp), both of which are used at runtime to provide tool responses and execute remote code that can directly control agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe integration that provides direct API operations for payments and billing: creating and managing customers, creating products/prices, creating and finalizing invoices, starting and cancelling subscriptions, and references payment intents and checkout sessions. It requires Stripe secret keys and exposes functions that perform write actions that create charges/subscriptions and finalize invoices — i.e., it is specifically designed to move money via a payment gateway. This matches the listed Direct Financial Execution indicators (Payment Gateway APIs), so it is high-risk for financial execution authority.