payment-integration

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document is explicitly a payment integration using Stripe. It contains concrete API calls that initiate and manage money flows: creating PaymentIntents and Checkout Sessions (stripe.checkout.sessions.create), creating subscriptions (stripe.subscriptions.create), creating billing portal sessions (stripe.billingPortal.sessions.create), and webhook handlers that process payment events (payment_intent.succeeded, invoice.paid, invoice.payment_failed, etc.). These are specific payment gateway operations (Stripe) used to accept and manage payments and subscriptions, so the skill grants direct financial execution capability. PCI guidance does not negate that these APIs perform real payment actions.