payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests only Stripe’s webhook request body at app/api/webhook/stripe/route.ts (via await req.text()), which is external and attacker-controllable in practice through the payment/webhook channel, making it a medium indirect prompt-injection exposure path.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payments integration and contains direct calls to Stripe's payment APIs (e.g., stripe.checkout.sessions.create, stripe.billingPortal.sessions.create, stripe.confirmPayment) and instructions for provisioning and using secret API keys (STRIPE_SECRET_KEY, webhook secret). These are specific payment gateway operations that enable creating payments, subscriptions, and billing portal sessions — i.e., direct financial execution capability.