quickbooks

Warn

Audited by Snyk on Oct 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill manages QuickBooks accounting operations via an official MCP server, including invoices, payment links, and sales settings (SKILL.md:3, 50, 89). These actions constitute direct financial operations (creating invoices/payment links). However, the workflow enforces independent access validation and authorization controls through Intuit's 3LO (Three-Legged OAuth) scopes, permission tiers, and Hatch approval mechanisms for writes and deletions (SKILL.md:19-20, 85-86).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 5, 2026, 01:16 AM
Issues
1