cost-gcp
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly uses GCP billing APIs/CLI and includes commands that modify billing and commitments (e.g., enabling Cloud Billing API, Cloud Billing Catalog API usage, gcloud billing commands, "gcloud compute commitments create" to create committed-use discounts, and "gcloud billing budgets create --budget-amount=1000USD"). Those are specific, purpose-built billing/finance operations (creating budgets/commitments) rather than generic tooling, so the skill grants direct financial execution authority over cloud billing/configuration.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata