engineering-stripe-game-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests Stripe webhook event payloads in boilerplate/webhooks.ts, which contain metadata and customer data originating from untrusted payment requests.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly provides instructions, setup steps, and code examples for integrating Stripe payment gateways (such as creating checkout sessions for currency bundles and subscriptions, handling webhooks, and processing refunds). This directly falls under payment gateway integration and financial execution capabilities.