stripe-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs the agent to add and use the MCP server https://rube.app/mcp at runtime (calling RUBE_SEARCH_TOOLS and RUBE_MANAGE_CONNECTIONS to fetch tool schemas and connection/auth flows), so that external endpoint directly controls available tools/instructions required for operation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes Stripe toolkit actions that perform monetary operations: creating and confirming payment intents, creating direct charges, capturing charges, issuing refunds, creating subscriptions and invoices, and creating checkout sessions. These are specific payment gateway operations (Stripe) that allow the agent to move money or change billing state, so it grants Direct Financial Execution Authority.