sesion-workflow-clinic

Warn

Audited by Snyk on Jul 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill explicitly integrates payment gateways and invoicing systems: the Architecture lists Stripe and Mercado Pago as payment providers, the environment vars include MERCADOPAGO_ACCESS_TOKEN and STRIPE_SECRET_KEY, and there is a full AFIP electronic invoicing service (authenticate + generateInvoice) that constructs and submits invoices via SOAP using certs/keys. These are specific financial execution integrations (payment gateways and billing APIs), not generic tools.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 13, 2026, 06:06 AM
Issues
1
Security Audit — snyk — sesion-workflow-clinic