finance-agent-skills

Warn

Audited by Snyk on Jun 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly finance-focused and names a payment gateway as a primary connector: "Stripe for invoices, subscriptions, charges, refunds, disputes, and balance." It also defines workflows that include refunds/credits review and guidance for "money-moving or irreversible actions" (summarize before doing it), which implies the agent is intended to perform or coordinate actions like charges and refunds via Stripe. Because Stripe is a specific payment API and the skill is specifically designed for billing/collections/refunds (not merely a generic API or browser tool), this qualifies as direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 9, 2026, 09:34 PM
Issues
1
Security Audit — snyk — finance-agent-skills