performance-memo

Warn

Audited by Snyk on Oct 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill reads marketing spend, CRM data, analytics, and billing records to generate a performance memo and create tickets/findings for marketing decisions. It does not perform or instruct direct financial operations such as transfers, payments, or purchases; its stripe integration is limited to read/search operations (stripe_api_search, stripe_api_details, stripe_api_read) and the skill explicitly specifies it is read-only (SKILL.md:282). This qualifies as an indirect financial operation (indirect handling of financial data/metrics and ticket creation), making the severity medium.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 18, 2026, 06:43 PM
Issues
1