kinde-billing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime workflows consume Kinde webhook/JWT payloads and webhook bodies (“Body is a JWT”) before handling meter updates and plan/agreement changes, so outsider-authored event text can be ingested into the LLM at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a billing integration: it connects to Stripe (test and production), publishes pricing, records metered usage, and handles billing webhooks/workflows. The documented management API includes write endpoints such as POST /api/v1/billing/agreements (create subscriptions/agreements) and POST /api/v1/billing/meter_usage (meter writes). Those operations directly create billing state and can trigger charges—i.e., direct financial execution—even though some require explicit authorization. Therefore this skill provides specific payment/billing execution capabilities.