webhook-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly accepts and persists webhook payloads from third-party providers (see "Pattern 1: Receiving Webhooks" /webhooks/stripe and "Pattern 3: Generic HMAC Verification" /webhooks/github in SKILL.md), and those untrusted external event payloads are read and routed to handlers that can trigger state changes and downstream actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with a payment gateway (Stripe). It includes Stripe-specific code (Stripe SDK instantiation with STRIPE_SECRET_KEY, stripe.webhooks.constructEvent), handles payment-related webhook events (payment_intent.succeeded, invoice.payment_failed, subscriptions), and updates order/payment state. This is a specific, non-generic payment integration and therefore meets the "Payment Gateways" criterion for Direct Financial Execution authority.