payment-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes a client-side runtime dependency that fetches and executes remote JavaScript (the PayPal SDK script https://www.paypal.com/sdk/js?client-id=YOUR_CLIENT_ID&currency=USD), which is a required runtime dependency that runs remote code in the client environment.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on payment gateways and payment processing (Stripe, PayPal, Square). It directly references API integration, checkout flows, subscription billing, refunds, webhook handling, and server-side calls to payment providers — all of which are specific capabilities to move/manage money. This meets the "Direct Financial Execution" criteria.