agency-accounts-payable-agent
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and primarily designed to move money. It exposes payment-specific operations (payments.send, payments.checkByReference, payments.getHistory, logPayment, etc.) and concrete workflows that execute transfers (examples showing payments.send calls). It also defines payment rails including ACH, Wire, Crypto (BTC/ETH), Stablecoin (USDC/USDT), and "Payment API (Stripe, etc.)" and describes automatic routing, retry, idempotency, and spend-limit escalation — all indicating built-in authority to initiate and manage real financial transactions. This is not a generic interface; it is a dedicated payments execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata