saas-scaffolder

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates payment gateways. It scaffolds Stripe (and lists "lemonsqueezy" as a payments option), includes env vars for STRIPE_SECRET_KEY and webhook secrets, and contains concrete server code that calls stripe.customers.create and stripe.checkout.sessions.create, plus webhook handlers that update subscription records in the DB. These are specific payment APIs and server-side transaction flows (creating customers, checkout sessions, handling subscription webhooks), so the tool is explicitly capable of executing financial operations.