stripe-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow for handling Stripe webhooks ingests free text/body from the HTTP request at POST /webhooks/stripe (e.g., Express raw req.body / Next request.text() / FastAPI await request.body()), which an outsider can supply as arbitrary payload data to trigger the handler.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Stripe (a payment gateway): it instantiates the Stripe SDK (require("stripe")(process.env.STRIPE_SECRET_KEY)), verifies webhook signatures with stripe.webhooks.constructEvent, and handles payment-related events (payment_intent.succeeded, invoice.paid, customer.subscription.created). It also requires STRIPE_SECRET_KEY/STRIPE_WEBHOOK_SECRET environment variables. Because it is specifically designed to interact with a payment provider (Stripe) and handle payment events, it meets the criteria for Direct Financial Execution authority.