scroll-world
Warn
Audited by Snyk on Oct 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill instructs the agent to check and use the
monidCLI and API to render video chains backed by paid API calls (pay-per-clip USD), which constitutes a direct financial operation (purchasing paid API usage / video generation services). However, it relies on the user's pre-existing CLI authentication and local command-line execution (monid --version,monid keys list,monid balance, and CLI commands) which provide independent service-level authentication and access control. Consequently, this falls under direct operations with qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata