cargo-quickstart

Warn

Audited by Snyk on Oct 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill executes lead search operations via the @cargo-ai/cli (cargo-ai orchestration action execute) which incurs credit consumption (billed at 0.02 credits per record, with options to purchase or utilize subscriptions/credits). This constitutes a direct financial operation (purchasing/charging for data searches). Access control is enforced via the CLI authentication mechanism (cargo-ai login --email, --oauth, or --token), satisfying the independent access control requirement.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 3, 2026, 05:11 PM
Issues
1