awx-best-practices
Warn
Audited by Snyk on Jul 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly references and instructs invoking specific financial-action tools/APIs (e.g., "billing-invoice void tool", "billing-invoice mark-as-paid tool", "card-update tool", "global-account close tool") and lists payment-specific domains such as payment links, refunds, disputes, and spend management. Those are concrete, non-generic capabilities to change financial state or perform payment-related operations, so this grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata