stripe-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow interacts with Stripe API resources (customers, charges, subscriptions, invoices, products, refunds) via Composio tools, which can contain user-submitted notes, descriptions, or metadata that may introduce outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external MCP server URL (https://rube.app/mcp) used in setup to connect the required tool provider, constituting an operational inbound dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill automates direct financial operations in Stripe—including creating charges, payment intents, subscriptions, refunds, and checkout sessions—via Composio's Stripe toolkit over Rube MCP. Although it requires a connected Stripe account (RUBE_MANAGE_CONNECTIONS), service-layer independent authentication/authorization controls are present (authenticated Composio/Stripe API connections and authorization flows via Rube MCP).