stripe-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves handling Stripe webhooks (SKILL.md:234-261), which ingest incoming HTTP POST requests containing payload data from Stripe events. While Stripe is a trusted infrastructure provider, the events carry metadata and user-supplied content (such as customer email, names, and custom metadata fields) submitted by external users during checkout or payment flows. Since webhooks monitor and consume outsider-submitted free text without prior selection by the agent, this presents an indirect prompt injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific instructions, code examples, and API usage for the Stripe payment gateway, which is explicitly a direct financial execution capability (managing payment processing, checkouts, subscriptions, payment intents, and refunds).