wechat-pay-integ

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). 该 skill 专门用于微信支付与支付宝支付的接入,明确覆盖“下单”、“调起支付”、“回调验签”、“退款”“幂等”等支付流程,并在示例中要求输出服务端流程、前端调用和回调幂等代码结构。尽管文档一处声明“不处理真实商户密钥”,但整体目的和输出是针对支付网关集成(即移动/触发与处理真实支付流水的技术方案),属于特定的支付/财务操作能力,因此应判定为具有直接金融执行相关能力。

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 05:34 PM
Issues
1
Security Audit — snyk — wechat-pay-integ