digits
Warn
Audited by Snyk on Apr 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill integrates directly with an accounting provider (Digits) via Apideck's Accounting unified API and is explicitly scoped to read, write, and reconcile invoices, bills, and payments, and to manage ledger accounts and journal entries. Those are financial transaction APIs (creating/updating payments, invoices, bills) — not generic browser automation or a generic HTTP caller. The skill also documents a Proxy API that can forward requests to Digits endpoints with injected auth, which can enable downstream transactional calls. While the doc notes some Digits transactional coverage is limited, the unified Accounting API and proxy explicitly expose financial-write operations (payments/invoices/bills), so this skill provides direct financial execution capabilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata