payment-testing

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payments testing skill built around PSP APIs (primarily Stripe) and documents concrete API actions: creating test clocks (stripe.testHelpers.testClocks.create / advance), creating customers (stripe.customers.create), retrieving PaymentIntents (stripe.paymentIntents.retrieve), handling/verifying webhooks (stripe.webhooks.constructEvent), and issuing refunds (refunds.create). It also references PSP-specific tooling (stripe listen/trigger) and sandbox flows for Adyen/PayPal/Braintree. These are specific, payment-focused APIs that can create/confirm charges and issue refunds (i.e., move money or simulate transaction lifecycle), so it grants Direct Financial Execution Authority (even if the docs emphasize test mode).