iblai-vibe-monetization

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about item-level monetization and integrates Stripe Connect Express, checkout flows (including guest checkout), billing APIs under /api/billing and /api/service/.../stripe/connect/, Stripe Connect onboarding, and subscription cancel/analytics endpoints. These are specific payment/financial APIs and workflows (sending/receiving payments, onboarding Stripe accounts, checkout callbacks), not generic tooling — so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 04:27 PM
Issues
1
Security Audit — snyk — iblai-vibe-monetization