tres-recon-gaps
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes specific GraphQL mutations that create financial transactions and automated reconciliation actions: the CreatePlug mutation (creates a transaction with amount, direction, assetId, thirdPartyIdentifier) and the CreateReconciliationGapFillRule mutation (creates automated gap-fill rules that will execute fills). These are explicit APIs to modify ledger/on-chain reconciliation state (i.e., move or record money), not generic tooling. TriggerDataCollect is also included to apply/sync those changes. Therefore this skill grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata