api-monetization

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about API monetization and includes direct, specific Stripe payment operations: creating products and metered prices, creating subscriptions for customers, and reporting usage via stripe.subscriptionItems.createUsageRecord(). These are concrete payment-gateway API calls that move or bill money (subscribe customers and record billable usage). This matches the "Payment Gateways" criterion for Direct Financial Execution rather than a generic capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check instruction tells the agent to run shell commands (ls) to inspect local skill directories and to offer/install missing skills via npx skills add, which instructs modifying the host filesystem and installing packages—actions that change machine state and can compromise it.