api-commerce-stripe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves handling Stripe webhook events where an outsider can submit arbitrary event payloads containing free text (such as customer names, metadata, or product info) into a monitored webhook queue.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The provided skill documentation (api-commerce-stripe) explicitly defines tools, APIs, and patterns for Stripe payment processing, including creating checkout sessions, payment intents, refunds, and subscriptions, which constitutes Direct Financial Execution Authority.