better-auth

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is the Better Auth server handler (e.g., toNextJsHandler(auth) / auth.handler(c.req.raw) / toNodeHandler(auth)), which ingests outsider-authored free text from the incoming HTTP request body/headers at endpoints like /api/auth/* and /api/auth/** before any internal item selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly lists a scoped package "@better-auth/stripe" with the purpose "Stripe payments", indicating a specific integration for a payment gateway (Stripe). This is a targeted financial integration (not a generic API/tool), so it grants direct financial execution capability.