webhook-safety

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about handling payment gateway webhooks (Stripe). It contains Stripe-specific code (stripe.webhooks.constructEvent), event types like checkout.session.completed and invoice.paid, and examples that allocate credits, create orders, and update subscription/billing state. These are concrete, payment-related operations tied to a payment provider, so this skill grants direct financial execution authority.