webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). At runtime, the webhook handler receives HTTP POST payloads from an external system (e.g., Stripe/GitHub/3rd-party AI) and passes the event body into stripe.webhooks.constructEvent(...), which makes the outsider-authored free-text payload available to the agent/LLM context if the skill logs or forwards event/err.message content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The documentation explicitly includes Stripe webhook handling (stripe.webhooks.constructEvent) and a payment-related example (payment_intent.succeeded -> fulfillOrder). This is a specific payment-gateway integration for processing payment confirmations, which falls under Direct Financial Execution authority.