cmux-billing

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents Stripe checkout, subscription management, customer portal, and webhook handling routes that create and manage paid subscriptions (e.g., /api/billing/checkout, /api/billing/portal, /api/billing/subscription), constituting direct financial operations. These routes rely on standard web server and Stripe signature/session authentication mechanisms for access control. Therefore, the financial-security exposure is classified as medium due to direct operations with qualifying independent access control.