ai-billing-safeguards

Warn

Audited by Snyk on May 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to manage and enforce monetary limits: it instructs setting provider-level spend limits (Anthropic monthly spend limit), contains concrete CLI/API calls to adjust quotas and billing alarms (aws service-quotas request-service-quota-increase, aws cloudwatch put-metric-alarm, gcloud alpha services quota update, and GCP Billing budget alerts), and implements programmatic budget guards that block execution when dollar limits are reached. Although it does not perform payment settlement or crypto/banking transactions, it explicitly includes APIs/commands to update billing/quota/budget settings. Per the rule that updating budgets/quotas counts as direct financial execution authority, this should be flagged.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 10, 2026, 05:21 PM
Issues
1
Security Audit — snyk — ai-billing-safeguards