mcp-stripe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow interacts with Stripe API resources (customers, invoices, products, payment intents, etc.) via MCP tools, which may ingest external user data or object metadata containing untrusted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with the Stripe MCP server (https://mcp.stripe.com) to perform direct financial operations including creating invoices, payment links, managing refunds (create_refund), and subscriptions. This constitutes Direct Financial Execution Authority via a specific payment gateway.