mongodb
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is primarily a MongoDB/database utility, but it includes an explicit TransactionService.transferCredits(...) method that programmatically debits one user and credits another inside a DB transaction and records a Transaction. That method is a specific, explicit function to move value/credits between accounts (starts a session, updates balances, creates a transaction record, commits/aborts). Under the decision logic ("Send Transaction" => 1), this constitutes direct financial execution authority (internal value transfers), so it should be flagged.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata