stripe-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references an external Model Context Protocol (MCP) server URL (https://rube.app/mcp) for setup and runtime interaction, presenting a weak/unknown provenance dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly provides tools and workflows for interacting with the Stripe payment gateway, including creating charges, payment intents, subscriptions, invoices, and issuing refunds. These are direct financial execution capabilities using a specific payment API.