pci-dss-compliance

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document explicitly includes concrete payment gateway integrations and code that performs money-moving actions: Stripe.js usage, creation of a payment method, and server-side calls to stripe.PaymentIntent.create with an sk_live_... API key (i.e., creating/confirming charges). It also describes tokenization and a flow that sends tokens to the payment processor to process payments. These are specific payment gateway APIs and example transaction calls, not generic tooling, so the skill grants direct financial execution capability.