postedly-mail-letter
Warn
Audited by Snyk on Nov 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill assists in preparing a letter and generating a checkout link for physical mailing services (Postedly), but payment and approval occur entirely on a hosted external page ("hosted Stripe Checkout" / "pay on that page") rather than being executed or authorized by the agent itself. This constitutes an indirect or informational workflow regarding payment handling, as the agent only generates quotes and checkout URLs without direct payment execution or stored payment capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata