recurly-webhooks
Warn
Audited by Snyk on Jul 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about Recurly (a payment/subscription gateway) and references the Recurly SDK and an API key (RECURLY_API_KEY) as environment variables, and shows example API usage (client.getSubscription). Although the doc focuses on webhook verification and state confirmation rather than initiating payments, it is specifically integrated with a payment gateway API—which falls under "Payment Gateways" per the core rule—so it grants direct financial execution capability risk.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata