setup-stripe-malaysia
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payment-gateway integration: it documents the API base (https://api.stripe.com), Authorization header format, secret/publishable key formats, Checkout Sessions and PaymentIntents endpoints (POST /v1/checkout/sessions, POST /v1/payment_intents), and prescribes creating Checkout Sessions/PaymentIntents server‑side with the secret key, redirecting customers, verifying webhooks, and performing idempotent settlement. These are concrete, payment-specific APIs and flows for initiating and settling payments (i.e., moving money). This is not a generic tool — it is explicitly designed to execute financial transactions via Stripe.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata