domain-finder
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly requires a VERCEL_TOKEN and references programmatic purchase actions: it directs use of the bundled script for availability/pricing checks and explicitly tells the user they can buy via
vercel domains buy <domain>or "the API's buy endpoint" (and references vercel-api.md for buying). Those elements enable the agent to perform domain purchase transactions (move money) through the registrar API.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata