axiom-implement-iap

Warn

Audited by Snyk on Apr 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly and narrowly about implementing in-app purchases via StoreKit 2. It contains concrete, specific functions and flows to initiate and complete payments (e.g., product.purchase(confirmIn: scene), transaction listener handling Transaction.updates, transaction.finish(), restorePurchases(), subscription purchase/status handling). Those are not generic tools — they are direct APIs to execute and manage financial transactions (App Store purchases/subscriptions). Therefore it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 26, 2026, 12:45 AM
Issues
1
Security Audit — snyk — axiom-implement-iap