self-hosted-funnel-launch
Warn
Audited by Snyk on Nov 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents a self-hosted sales funnel builder ("Autonnel") that integrates with payment providers such as Stripe and PayPal (SKILL.md:148-153) and features operational tools including
deliver_orderover MCP (SKILL.md:286), constituting a direct financial operation (processing purchases/taking money). Regarding access control, the skill documents authentication mechanisms using Bearer tokens (Authorization: Bearer <your-api-key>) enforced by the service API and MCP server endpoints (SKILL.md:212-214, 284), which qualifies as independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata