billing-stripe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow handles Stripe webhook events and API integration, where webhook payloads can contain outsider-authored customer or invoice data ingested by the event handlers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates integration with Stripe billing APIs, subscriptions, payment/subscription flow debugging, charging and granting credits, and handling Stripe webhook events, which represents Direct Financial Execution capability via a payment gateway.