stripe-stack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves creating a Stripe webhook handler endpoint that ingests incoming webhook HTTP request bodies from Stripe, which can contain user-submitted data and custom metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically designed for Stripe payment integration, covering payment gateways, subscriptions, checkout flows, and credit systems. It explicitly implements Stripe APIs (Stripe SDK, webhooks, checkout sessions) which fall under the category of payment gateways and direct financial execution capabilities.