paperclip-create-agent

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill exposes REST endpoints to create agents (POST /api/companies/{companyId}/agents and related hire endpoints) and explicitly requires/handles a monetary field budgetMonthlyCents and verifying persisted "budget". That is an API surface for updating an agent's monetary budget value (i.e., managing budgets via API). While it is not a payment gateway or crypto signing tool, it directly allows setting/updating monetary budget fields via the platform API, which falls under the "managing ad spend budgets / updating budgets" category of direct financial execution risk.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 08:26 PM
Issues
1
Security Audit — snyk — paperclip-create-agent