tres-recon-gaps

Warn

Audited by Snyk on Aug 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill exposes specific GraphQL mutations that create financial transactions and automated reconciliation actions: the CreatePlug mutation (creates a transaction with amount, direction, assetId, thirdPartyIdentifier) and the CreateReconciliationGapFillRule mutation (creates automated gap-fill rules that will execute fills). These are explicit APIs to modify ledger/on-chain reconciliation state (i.e., move or record money), not generic tooling. TriggerDataCollect is also included to apply/sync those changes. Therefore this skill grants direct financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 1, 2026, 04:44 AM
Issues
1
Security Audit — snyk — tres-recon-gaps