debugging-vercel-builds
Warn
Audited by Snyk on Jun 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes explicit, Stripe-specific operations and credentials (mentions STRIPE_SECRET_KEY, NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PRICE_ID_/STRIPE_PRODUCT_ID_, and commands like "cofounder run connect_stripe", "cofounder run get_stripe_connection_status", and "cofounder run sync_stripe_env"). These are payment-gateway specific tools/flows (able to connect or sync live/test Stripe credentials), which fall under the payment gateway category of Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata