flutterwave-ussd
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payment integration for the Flutterwave gateway. It defines FLW secret keys and base URLs, builds authenticated requests with "Authorization: Bearer <FLW_SECRET_KEY>", and documents/uses endpoints to create USSD charges (POST /charges, /charges?type=ussd) and verify transactions (/transactions/{id}/verify). Those capabilities directly enable initiating and verifying real financial transactions (payment gateway operations).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata