pci-compliance

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes payment gateway code and examples that perform payments: e.g., use of the Stripe SDK with stripe.api_key = "sk_..." and stripe.Charge.create(...) in charge_with_token, plus storing payment method tokens via Stripe. Although the skill is focused on PCI compliance, it contains concrete, specific APIs and functions for creating charges and managing payment-method tokens (i.e., sending transactions). This qualifies as direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 09:37 AM
Issues
1
Security Audit — snyk — pci-compliance