upgrade-stripe

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt contains multiple code and curl examples that embed API keys (e.g., 'sk_test_xxx') directly in commands and client initializations, which requires the LLM to include secret values verbatim in output and is therefore insecure.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document is explicit Stripe (payment gateway) documentation with concrete API usage: initialization with a secret key, examples calling stripe.Customer.create, and a curl request to the Stripe API. These are specific payment gateway integrations capable of initiating financial operations.