performance-memo
Warn
Audited by Snyk on Oct 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill reads marketing spend, CRM data, analytics, and billing records to generate a performance memo and create tickets/findings for marketing decisions. It does not perform or instruct direct financial operations such as transfers, payments, or purchases; its stripe integration is limited to read/search operations (
stripe_api_search,stripe_api_details,stripe_api_read) and the skill explicitly specifies it is read-only (SKILL.md:282). This qualifies as an indirect financial operation (indirect handling of financial data/metrics and ticket creation), making the severity medium.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata