mobilerun-assistant

Warn

Audited by Snyk on Oct 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents a chat assistant API that interacts with a virtual assistant capable of executing tasks, including approval prompts for sensitive actions like sending payments (SKILL.md:178-181). However, the skill itself provides no direct financial execution or settlement capabilities; it only manages conversational sessions, reads message history, and answers or rejects human-in-the-loop (HITL) questions and approval cards via Mobilerun chat endpoints (SKILL.md:41-52). This represents an indirect workflow/chat interface rather than a direct financial operation.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 7, 2026, 01:24 AM
Issues
1