Stripe Payments
Warn
Audited by Snyk on Jun 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed around Stripe payment processing and subscription management and contains concrete payment APIs and operations that move money: e.g., stripe.checkout.sessions.create (creating checkout sessions to charge customers), stripe.paymentIntents.create and stripe.confirmCardPayment (authorizing/confirming captures), stripe.subscriptions.create/update (creating/updating billable subscriptions), stripe.refunds.create (issuing refunds), collection_method: charge_automatically and automated dunning/retry flows, plus webhook handlers for payment_intent.* and invoice.* events to trigger fulfillment, retries, cancellations, etc. These are specific payment-gateway actions (Stripe) intended to execute financial transactions, so this grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata