gic-skills
Warn
Audited by Snyk on Jun 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill bundle explicitly includes a "stripe-app-builder" subsection and concrete Stripe-specific commands and workflows (e.g., cofounder run get_stripe_connection_status, cofounder run sync_stripe_env, cofounder run create_managed_stripe_product, cofounder run add_stripe_webhook). These are explicit payment-gateway operations (creating products/prices, syncing credentials/webhooks) rather than generic tooling, so the skill grants direct financial execution capability via Stripe.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata