hmos-ascf-assistant
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes platform payment APIs and instructions to execute payments: it documents has.requestPayment({ orderStr }) for physical goods (Payment Kit) and has.createIap({ productId, productType }) for virtual goods (IAP). These are specific, purpose-built payment APIs that enable initiating financial transactions, so this skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata