Stripe MCP Integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Although the skill includes a “stripe_search_documentation” tool backed by https://mcp.stripe.com/v1/sse (docs search), the provided material does not indicate that any outsider-authored free text (e.g., user-generated content from a monitored feed/inbox/tickets) is ingested by the required runtime workflow without the agent first selecting specific items; only trusted first-party Stripe docs are referenced.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a direct Stripe payment gateway integration. It explicitly exposes MCP tools to create customers, products, subscriptions, and invoices (including finalizing invoices for payment), and requires a Stripe secret key (stripe_sk_... / STRIPE_SECRET_KEY). These are specific financial operations and APIs for moving/collecting funds, not generic utilities.