sync-jira-epic

Warn

Audited by Snyk on Nov 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill synchronizes local markdown epic files with Jira via REST APIs, creating and updating issues (direct operation: creation/updates via API). However, it requires and documents standard service API authentication via JIRA_API_TOKEN, JIRA_USER_EMAIL, and JIRA_URL (qualifying independent access control enforced by Jira). Therefore, this is a direct operation with qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 10, 2026, 03:28 PM
Issues
1