storybook-pipeline

Warn

Audited by Snyk on Oct 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill orchestrates an AI storybook generation pipeline that invokes image generation (Fal API) and text-to-speech narration (ElevenLabs), which cost money and spend budget/credits (direct operations). However, these operations are delegated via sub-skills and depend on user-interactive hard gates and explicit model/aspect-ratio selection before any execution occurs. Because the orchestrator relies entirely on user prompts and manual intermediate gates without independent service-layer or programmatic authentication/validation for financial execution, it represents a direct financial operation without established qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 30, 2026, 08:52 PM
Issues
1