engineering-wechat-mini-program-developer
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes WeChat Pay integration and concrete code to create orders and invoke payments. The services/payment.js template builds an order on the server, receives prepay parameters, and calls wx.requestPayment (timeStamp, nonceStr, package, paySign) to execute payments. This is a specific payment gateway integration (WeChat Pay), i.e., direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata