omni-budget
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly manages spending limits, token quotas, and enforces cost controls ("Configure spending limits... enforce cost controls across providers") and exposes an API endpoint that updates rate-limit/spend configuration (POST /api/rate-limit). That is an explicit capability to modify budget/spend controls — i.e., to change financial limits — which meets the definition of Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata