render-street-interview

Warn

Audited by Snyk on Nov 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents paid video generation commands (e.g., python scripts/single_gen.py --brand <slug> --seed <n> --yes, SKILL.md:94) routed through a proxy (SKILL.md:105), constituting a direct financial operation (purchasing media generations). However, it lacks any documented authentication or authorization check enforced by the execution layer or service for these paid routes (relying entirely on local script flags like --yes without independent service-side access validation controls). Therefore, it is classified as a direct operation with no established qualifying control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 8, 2026, 12:50 AM
Issues
1