processing-stripe-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests and acts on third-party Stripe data (webhook events in app/api/webhooks/stripe/route.ts and Stripe API calls like customers.retrieve and session.metadata usage), which can contain user-supplied/untrusted fields that are parsed and used to update the database or trigger emails, so those external inputs could indirectly influence behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly built to process payments via Stripe. It includes direct use of the Stripe SDK and secret keys, creates checkout sessions and payment intents, manages subscriptions (create/update/cancel), processes webhook events for payment lifecycle, and contains functions that call stripe.paymentIntents.create, stripe.checkout.sessions.create, stripe.subscriptions.create/update/cancel, and other payment-changing APIs. These are concrete payment gateway operations (moving money and managing billing), so this skill provides direct financial execution capability.