nodejs-backend
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes an explicit transferFunds function that updates account balances inside a DB transaction (debiting one account and crediting another). This is a concrete, specific routine to move money (internal fund transfers), so it grants direct financial execution capability even though it uses the app's database rather than an external payment provider.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata