ecommerce-payment-processing

Warn

Audited by Snyk on Jul 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed for payment operations and includes concrete APIs and code that perform financial transactions. It defines a PaymentGateway interface (createPaymentIntent, capturePayment, refundPayment) and provides a StripeAdapter implementation that calls stripe.paymentIntents.create, stripe.paymentIntents.capture, and stripe.refunds.create. It also includes webhook handlers that process payment events (markPaid, markRefunded). These are specific payment gateway integrations and transaction-executing functions (create/capture/refund), which constitute Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 8, 2026, 12:25 PM
Issues
1
Security Audit — snyk — ecommerce-payment-processing