self-hosted-funnel-launch

Warn

Audited by Snyk on Nov 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents a self-hosted sales funnel builder ("Autonnel") that integrates with payment providers such as Stripe and PayPal (SKILL.md:148-153) and features operational tools including deliver_order over MCP (SKILL.md:286), constituting a direct financial operation (processing purchases/taking money). Regarding access control, the skill documents authentication mechanisms using Bearer tokens (Authorization: Bearer <your-api-key>) enforced by the service API and MCP server endpoints (SKILL.md:212-214, 284), which qualifies as independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 1, 2026, 08:41 PM
Issues
1