github-pull-request
Warn
Audited by Snyk on Apr 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill prompt explicitly references payment gateway integration: the "外部連携" section lists "Stripe API" with "決済処理" and even mentions using
stripe-nodev14. The example API (POST /api/orders) includes apayment_methodfield. These are specific, named payment-related integrations (Stripe), which meet the rule for Direct Financial Execution capability—even though the skill's main purpose is PR generation, it explicitly documents payment gateway integration.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata