ifuture-generation

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents the usage of an API (https://api.i-future.net/v1/ai/generation) via Node.js scripts to create AI-generated images, video, and audio, which deducts points/credits from the user's account balance (a direct financial operation/purchase/charge). Access control relies entirely on an API key (IFUTURE_API_KEY) configured in the environment without an independent external authorization or validation layer enforced by a service-side gate outside the agent's control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 02:11 AM
Issues
1