stripe

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides documentation and implementation guidance (Next.js server actions) for integrating Stripe checkout sessions and billing portal sessions (stripe.checkout.sessions.create, stripe.billingPortal.sessions.create), which constitute direct financial payment/subscription operations. These routes are guarded by Supabase authentication checks (await supabase.auth.getUser(), redirecting unauthenticated users to /login), establishing independent service-layer authentication for the payment routes.