paperclip-create-agent
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes REST endpoints to create agents (POST /api/companies/{companyId}/agents and related hire endpoints) and explicitly requires/handles a monetary field budgetMonthlyCents and verifying persisted "budget". That is an API surface for updating an agent's monetary budget value (i.e., managing budgets via API). While it is not a payment gateway or crypto signing tool, it directly allows setting/updating monetary budget fields via the platform API, which falls under the "managing ad spend budgets / updating budgets" category of direct financial execution risk.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata