autumn-best-practices

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a billing/integration SDK built on top of Stripe (Autumn). It requires a secret API key and exposes specific payment-related methods: checkout (returns Stripe payment URL), attach (confirm purchase / card-on-file), cancel (cancel subscription), customers.create, and track usage. These are direct payment/subscription operations (payment gateway integration), so the skill grants direct financial execution capability.