create-payment-credential

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves browsing and reading merchant checkout pages and handling API responses, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill specifically integrates with Stripe's Link CLI (@stripe/link-cli), which is explicitly designed to retrieve secure payment credentials (virtual cards, shared payment tokens, and link pay tokens) and execute payments/purchases on behalf of users via specific APIs and CLI commands like spend-request create, mpp pay, and spend-request retrieve. This falls directly under the Payment Gateways and Financial Execution capability criteria.