curviate-premium
Warn
Audited by Snyk on Oct 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents CLI commands for LinkedIn Sales Navigator and Recruiter, including
curviate recruiter job publish, which supports promoted job postings that spend real money (a direct financial operation). The skill relies on API keys (curviate login --api-key <key>) without independent, service-enforced user authentication or authorization controls documented for the payment route itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata