xero
Warn
Audited by Snyk on Oct 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill integrates with Xero via Apideck's Accounting unified API to read, write, and reconcile invoices, bills, payments, and journal entries (SKILL.md:4). Creating invoices, bills, and payments represents an indirect/direct financial operation (creating bills/invoices, payments). Access is protected by OAuth 2.0 managed through Apideck Vault and Xero tenant authorization (SKILL.md:12, 133-134), providing independent service-layer authentication for the payment/accounting routes.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata