sesion-workflow-clinic
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. The skill explicitly integrates payment gateways and invoicing systems: the Architecture lists Stripe and Mercado Pago as payment providers, the environment vars include MERCADOPAGO_ACCESS_TOKEN and STRIPE_SECRET_KEY, and there is a full AFIP electronic invoicing service (authenticate + generateInvoice) that constructs and submits invoices via SOAP using certs/keys. These are specific financial execution integrations (payment gateways and billing APIs), not generic tools.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata