backend-fintech-patterns

Warn

Audited by Snyk on Jun 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly implements payment gateway integrations and transaction execution: it calls stripe.paymentIntents.create/confirm/capture, uses payment_method IDs and idempotency keys, posts ledger journal entries on successful payments, enforces escrow/reserve management, and includes KYC/AML workflows via Stripe Identity/Onfido/Jumio. These are specific, production-grade financial operations (payment gateway API usage, transaction capture, ledger settlement), not generic tooling — therefore it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 29, 2026, 08:46 PM
Issues
1
Security Audit — snyk — backend-fintech-patterns