jpm-merchant-integrations

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill guides a developer through implementing J.P. Morgan Payments API integrations (Checkout, Online Payments, Tokenization, 3-D Secure, Account Updater, and Reporting) in merchant projects (SKILL.md:2-3, SKILL.md:40-45). This represents an indirect financial operation (creating bills/invoices, processing payments, or handling payment-related requests/reporting for downstream execution). Access control and credential validation are assumed to be handled externally via OAuth authentication modules (jpm-oauth and getAccessToken()) previously wired into the project (SKILL.md:3, SKILL.md:16-17).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 20, 2026, 07:16 PM
Issues
1