backend-fintech-patterns
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements payment gateway integrations and transaction execution: it calls stripe.paymentIntents.create/confirm/capture, uses payment_method IDs and idempotency keys, posts ledger journal entries on successful payments, enforces escrow/reserve management, and includes KYC/AML workflows via Stripe Identity/Onfido/Jumio. These are specific, production-grade financial operations (payment gateway API usage, transaction capture, ledger settlement), not generic tooling — therefore it grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata