revcat-commands
Warn
Audited by Snyk on May 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The revcat skill is a command reference for a revenue/subscription management tool and includes explicit commands that perform billing actions: e.g., subscribers refund <subscription_id> <transaction_id>, purchases refund <purchase_id> [-y], subscriptions refund <sub_id> [-y], subscriptions cancel, invoices view, and subscriber transfer. These are concrete, finance-facing operations (refunds/cancellations/transfers of purchases/subscriptions) rather than generic tooling, so the skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata