worktree

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a Stripe payment integration flag: --stripe (pnpm worktree start [--stripe]) which "turns billing on" and runs stripe listen forwarding test-mode webhooks, injecting the Stripe signing secret and requiring the stripe CLI and a STRIPE_SECRET_KEY. This is a specific payment-gateway integration (Stripe) that enables exercising checkout/subscription/webhook flows end-to-end, so it constitutes direct financial execution capability (payment gateway tooling), even if aimed at local/test mode.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.50). The skill explicitly instructs the agent to create and remove git worktrees, run installs/builds, and start/stop or nuke local services and Docker containers (modifying branches, files, containers/volumes and local tooling state), though it does not ask for sudo or system-level config/user changes.