customercare-mcp-builder
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly describes transaction patterns for "money transfers" and shows example tools like get_account_balance and transfer_money (a two-step transaction with prepare_/confirm_or_cancel_ naming). It mandates implementing confirmation, storing pending transactions, verifying ownership, and returning exact balances — all indicating explicit, built-in support for executing financial transactions (sending money). This constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata