jpm-merchant-integrations
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill guides a developer through implementing J.P. Morgan Payments API integrations (Checkout, Online Payments, Tokenization, 3-D Secure, Account Updater, and Reporting) in merchant projects (SKILL.md:2-3, SKILL.md:40-45). This represents an indirect financial operation (creating bills/invoices, processing payments, or handling payment-related requests/reporting for downstream execution). Access control and credential validation are assumed to be handled externally via OAuth authentication modules (
jpm-oauthandgetAccessToken()) previously wired into the project (SKILL.md:3, SKILL.md:16-17).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata