vercel-website
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes Stripe payment integrations (AppThree). It defines API routes like /api/create-checkout (create Stripe checkout session), /api/customer-portal, and /api/stripe-webhook, and lists environment variables such as STRIPE_SECRET_KEY and STRIPE_PRO_PRICE_ID. These are specific payment gateway endpoints and credentials that enable creating checkout sessions and managing billing — i.e., direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata