video-gen
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill delegates video generation tasks via the
submit_videotool (SKILL.md:9, 228), which consumes "paid video-generation entitlement (subscription or paid credits)" (SKILL.md:49). This represents a direct purchase/service charge operation. The documented execution instructions do not specify any independent authentication or authorization check enforced by the service layer for submitting these jobs; therefore, qualifying independent access control is absent for this direct financial operation.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata