create-payment-credential

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow directs the agent to browse merchant web pages and parse HTTP response bodies/headers from arbitrary URLs during payment processing and catalog searching, exposing the agent to outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools specifically designed for payment processing and financial transactions via the Stripe Link CLI (link-cli). It explicitly includes functions to request payment credentials (cards, tokens), execute purchases, manage spend requests, handle payment gateways (Stripe Link), and process programmatic payments via HTTP 402 / Universal Commerce Protocol (UCP). This satisfies the direct financial execution capability requirement.