mobilerun-assistant
Warn
Audited by Snyk on Oct 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents a chat assistant API that interacts with a virtual assistant capable of executing tasks, including approval prompts for sensitive actions like sending payments (SKILL.md:178-181). However, the skill itself provides no direct financial execution or settlement capabilities; it only manages conversational sessions, reads message history, and answers or rejects human-in-the-loop (HITL) questions and approval cards via Mobilerun chat endpoints (SKILL.md:41-52). This represents an indirect workflow/chat interface rather than a direct financial operation.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata