cargo-billing

Warn

Audited by Snyk on Oct 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents billing and credit management operations via the cargo-ai CLI, including update-payment-method (lines 61, 205, 235) which handles credit card submission and payment method updates. This represents a direct financial operation (setting up payment credentials/charges). Authentication is handled via service-level credentials (cargo-ai login or API tokens, as noted in lines 5 and 40), establishing qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 3, 2026, 09:46 AM
Issues
1