customercare-mcp-builder

Warn

Audited by Snyk on Mar 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly describes transaction patterns for "money transfers" and shows example tools like get_account_balance and transfer_money (a two-step transaction with prepare_/confirm_or_cancel_ naming). It mandates implementing confirmation, storing pending transactions, verifying ownership, and returning exact balances — all indicating explicit, built-in support for executing financial transactions (sending money). This constitutes direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 26, 2026, 08:24 PM
Issues
1
Security Audit — snyk — customercare-mcp-builder