quickbooks
Warn
Audited by Snyk on Oct 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill manages QuickBooks accounting operations via an official MCP server, including invoices, payment links, and sales settings (SKILL.md:3, 50, 89). These actions constitute direct financial operations (creating invoices/payment links). However, the workflow enforces independent access validation and authorization controls through Intuit's 3LO (Three-Legged OAuth) scopes, permission tiers, and Hatch approval mechanisms for writes and deletions (SKILL.md:19-20, 85-86).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata