telegram-mini-app
Warn
Audited by Snyk on Oct 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill contains direct financial transaction code via TON blockchain integration and Telegram invoices (SKILL.md:149-170, SKILL.md:191-204) to perform purchases and payments. These direct financial operations rely solely on client-side code and API calls without independent service-side authentication or authorization controls enforced for the payment route itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata