linkpix-ozon-image

Warn

Audited by Snyk on Nov 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents AI image generation operations via a CLI tool (qhkit image generate / estimate) through a service platform (青虎AI) that consumes credits/quotas. The direct generation command executes a paid service operation. However, the documentation explicitly instructs the agent that user confirmation is required before generating (generate 会创建任务、消耗积分,发起前必须把本次提交的关键参数一次性列给用户...等用户明确同意后才能执行提交), and cost/credit estimation is supported (estimate). This constitutes strong external/user approval gating the direct payment/token consumption operation, placing it in the medium tier.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 5, 2026, 06:13 AM
Issues
1