conversion-tracking

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references Stripe payment integration: it looks for Stripe keys in env files, Stripe packages in package.json, and code patterns like stripe.checkout.sessions.create; it includes a dedicated "Stripe Checkout integration" audit area and instructs creating webhook handlers (absolute path example app/api/webhooks/stripe/route.ts). Those are specific payment-gateway APIs and artifacts (Stripe secret keys, webhooks, session creation), which qualify as direct financial execution capability.