cargo-quickstart
Warn
Audited by Snyk on Oct 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill executes lead search operations via the
@cargo-ai/cli(cargo-ai orchestration action execute) which incurs credit consumption (billed at 0.02 credits per record, with options to purchase or utilize subscriptions/credits). This constitutes a direct financial operation (purchasing/charging for data searches). Access control is enforced via the CLI authentication mechanism (cargo-ai login --email,--oauth, or--token), satisfying the independent access control requirement.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata