stripe-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the required webhook handler ingests the HTTP request body (Stripe’s JSON payload) and passes it to stripe.webhooks.constructEvent(...), meaning attacker-controlled free text from an external sender (Stripe webhook request) becomes LLM-readable context via the event payload.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Stripe (a payment gateway): it includes Stripe SDK usage (stripe = require('stripe')(process.env.STRIPE_SECRET_KEY) / stripe.api_key = ...), expects STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET, and handles payment-related events (payment_intent.succeeded, invoice.paid, customer.subscription.created, checkout.session.completed). Because it integrates directly with a payment gateway and processes payment/subscription events, it meets the checklist for Payment Gateways and thus grants direct financial execution authority.