flutterwave-refunds
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform payment operations with a payment gateway (Flutterwave). It defines endpoints and request code for creating and managing refunds (POST /transactions/{id}/refund and POST /refunds), uses a FLW_SECRET_KEY Bearer token for authenticated API calls, and includes operations for creating refunds and listing/retrieving them. These are specific, explicit financial execution actions (initiating refunds), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata