release-conductor
Warn
Audited by Snyk on Oct 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The release-conductor skill drives software deployment and release workflows (including production deployment, staging, and rollback scripts in a project recipe). While it manages deployment commands, step 5 and step 7 document that direct production deployment and rollback require explicit human approval and session verification ("deploy runs the production deploy only with the human's explicit yes for this release", "release deploy --approved-by"). This constitutes strong external operational gating qualifying for medium severity under direct financial/operational control guidelines.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata