flutterwave-mobile-money

Warn

Audited by Snyk on May 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is an explicit integration with a payment gateway (Flutterwave). It defines API base URLs, requires a FLW_SECRET_KEY for Authorization, and exposes specific endpoints to initiate mobile-money charges (POST /charges?type=mobile_money, v4 POST /charges) and to verify transactions (GET /transactions/{id}/verify). These are concrete payment operations (creating charges, verifying payments) rather than generic HTTP or browser tools, so the skill directly enables moving/collecting money.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 6, 2026, 01:27 PM
Issues
1