iblai-vibe-monetization-onboard

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs at runtime to fetch the live OpenAPI schema from https://api.iblai.app/dm/api/docs/schema/, and that schema is used as the source of truth to determine endpoint paths, methods, and request/response shapes, so remote content can directly control the agent's API-calling behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about Stripe Connect onboarding and includes concrete, purpose-built payment operations: starting onboarding (POST onboard), refreshing onboarding links, retrieving a one-shot Stripe Express dashboard URL, and deleting (disconnecting) a Stripe Connect account. These are direct Payment Gateway integrations (Stripe) intended to enable or disable a platform's ability to accept payments, so this skill grants direct financial execution authority.