gic-coding-agent-skills

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill bundle explicitly includes a Stripe billing scaffolding subsection ("stripe-generated-app-scaffold") and guidance for implementing payment flows: checkout session creation, customer portal, webhook handlers, local billing state, subscription handling, and CLI commands like cofounder run create_managed_stripe_product and cofounder run get_stripe_webhook_destination. It also references secret env vars (STRIPE_SECRET_KEY, NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET). These are specific, purpose-built payment integration capabilities (payment gateway APIs), not generic tooling, so it grants direct financial execution authority.