linkpix-ozon-image
Warn
Audited by Snyk on Nov 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents AI image generation operations via a CLI tool (
qhkit image generate/estimate) through a service platform (青虎AI) that consumes credits/quotas. The direct generation command executes a paid service operation. However, the documentation explicitly instructs the agent that user confirmation is required before generating (generate会创建任务、消耗积分,发起前必须把本次提交的关键参数一次性列给用户...等用户明确同意后才能执行提交), and cost/credit estimation is supported (estimate). This constitutes strong external/user approval gating the direct payment/token consumption operation, placing it in the medium tier.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata