stripe-payment-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow fetches outsider-authored Gmail email bodies (plaintextBody) from Stripe notification emails at runtime (native Gmail mcp__claude_ai_Gmail__get_thread / backup mcp__zapier__gmail_find_email), and that free text is then parsed and fed into the agent’s LLM context for Step 5.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates with Stripe (native Stripe connector and Zapier's Stripe actions) to look up payments, invoices, payment_intent IDs, and customer data. Stripe is a payment gateway API (not a generic tool), and the skill is specifically designed around Stripe payment data retrieval; under the rules, the presence of a Stripe payment-gateway integration qualifies as Direct Financial Execution authority (Risk: 1), even though the skill mainly reads payment/invoice data rather than initiating transfers.