ifuture-generation
Warn
Audited by Snyk on Nov 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents the usage of an API (
https://api.i-future.net/v1/ai/generation) via Node.js scripts to create AI-generated images, video, and audio, which deducts points/credits from the user's account balance (a direct financial operation/purchase/charge). Access control relies entirely on an API key (IFUTURE_API_KEY) configured in the environment without an independent external authorization or validation layer enforced by a service-side gate outside the agent's control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata