ecommerce-payment-processing
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for payment operations and includes concrete APIs and code that perform financial transactions. It defines a PaymentGateway interface (createPaymentIntent, capturePayment, refundPayment) and provides a StripeAdapter implementation that calls stripe.paymentIntents.create, stripe.paymentIntents.capture, and stripe.refunds.create. It also includes webhook handlers that process payment events (markPaid, markRefunded). These are specific payment gateway integrations and transaction-executing functions (create/capture/refund), which constitute Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata