mongodb

Warn

Audited by Snyk on Mar 31, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is primarily a MongoDB/database utility, but it includes an explicit TransactionService.transferCredits(...) method that programmatically debits one user and credits another inside a DB transaction and records a Transaction. That method is a specific, explicit function to move value/credits between accounts (starts a session, updates balances, creates a transaction record, commits/aborts). Under the decision logic ("Send Transaction" => 1), this constitutes direct financial execution authority (internal value transfers), so it should be flagged.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 31, 2026, 06:59 AM
Issues
1