postedly-fax-document
Warn
Audited by Snyk on Nov 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill operates a direct financial purchase/charge workflow for fax transmission via Postedly (
postedly_checkout,postedly_quote, Stripe Checkout authorization). While the user must approve and pay on a hosted Stripe/Postedly checkout page outside the chat interface, delegated purchasing and transaction routing through external checkout and API calls count as a direct operation. Independent authentication and authorization are enforced via OAuth connection and hosted service access control (Postedly/Stripe backend), satisfying qualifying control requirements.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata