flower-fruit-basket-balloon-delivery
Warn
Audited by Snyk on Jun 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes a specific "place_order" action that creates orders and initiates a credit-card payment flow (it sends a credit card request to the user's mobile app and completes the order once the user approves). This is an explicit e-commerce payment execution capability (requires confirmed_total, delivery_date, recipient, etc.) rather than a generic browsing or HTTP tool. Even though final card entry/approval occurs in the mobile app, the skill programmatically initiates payment/transaction flow and therefore grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata