flutterwave-tokenized-charges
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform payment operations using the Flutterwave payment gateway. It includes authenticated API calls (requires FLW_SECRET_KEY) and concrete endpoints for creating tokenized charges (POST /tokenized-charges), charging stored payment methods (POST /charges), listing payment methods, and verifying charge results. Those are direct payment gateway operations that can move money (run recurring charges and manage retries), not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata