link-cli

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly configures and authenticates the Stripe Link CLI (link-cli) for agent payments and financial insights, specifically mentioning scopes like payment_methods.agentic and pointing to downstream payment credential creation and transaction tools. However, the document itself defines a setup and authentication utility, referencing external skills for the actual financial execution (e.g., create-payment-credential), rather than containing direct payment gateway APIs or transaction execution commands within its own text. Wait, let's look closer at the core rule: "The skill must be specifically designed for financial operations... Payment Gateways (Stripe, PayPal, etc.)." The tool explicitly installs @stripe/link-cli, which is Stripe's official tool, and configures agent payments (payment_methods.agentic), falling squarely under payment gateway/financial authorization setup for direct financial execution.