deepline-gtm

Warn

Audited by Snyk on Oct 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents CLI commands for checking billing balance, running paid tools and plays via deepline tools execute and deepline plays run, checking usage, and handling out-of-credit states (deepline billing usage --request-id, quote checkout commands). These represent indirect and direct billing/usage operations managed through the Deepline GTM platform. However, the operational financial task (purchasing leads/runs or topping up) relies on executing CLI commands where the agent prompts for user approval or quotes checkout commands rather than autonomously executing unauthorized direct payments or financial transfers itself, or the service billing operates via standard CLI usage reporting/billing checks without independent service-layer direct payment execution controlled solely by the agent without approval. Reviewing the direct financial scope, it interacts with a platform's billing/usage and pricing commands (deepline billing balance, deepline describe, usage tracking), which constitute indirect billing/usage reporting and estimation rather than direct automated fund transfers or charges initiated by the agent without user confirmation (as explicitly instructed by approval workflows in section 4). Therefore, this is classified as an indirect financial operation (or supported billing query/tracking workflow).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 29, 2026, 12:22 PM
Issues
1