workflow-automation

Warn

Audited by Snyk on Mar 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed for securities operations and repeatedly references initiating and controlling money/asset movements: cash disbursements, account transfers (ACAT submissions / submit to custodian), journal entries, and approval matrices with dollar thresholds. Those are specific, finance-native actions that correspond to "send transaction" behaviors (not merely generic automation). Although the document frames these as workflow design guidance (with approvals and controls), it explicitly models and orchestrates the submission of transfers/disbursements to custodians and ACATS — i.e., direct financial execution-related functions. Therefore it meets the criterion for direct financial execution authority risk.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 19, 2026, 11:45 PM
Issues
1
Security Audit — snyk — workflow-automation