iblai-vibe-monetization-configure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In /iblai-vibe-monetization-configure, the MonetizationTab runtime ingests free text provided by the platform admin (e.g., customItemType/customItemName/description entered in the custom-item wizard, plus pricing tier fields like name/description/features/remark) before calling the billing API endpoints (DM) to create/update paywall config and price tiers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with a payment gateway (Stripe). It requires Stripe Connect onboarding (is_ready_for_payments), provisions Stripe products when enabling paywalls, and exposes create/update/delete price mutations and checkout-related mutations (guest checkout). Those are specific payment operations (provisioning Stripe products/prices and creating checkouts) — i.e., direct financial execution capabilities.