payment-integration

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill prompt is explicitly about payment integration engineering and operational control of money flows: it mandates owning checkout flow correctness across authorize/capture/refund/void paths, idempotency and retry handling for client and server payment calls, webhook verification and reconciliation, settlement and ledger synchronization, and secret/key/PCI boundary hygiene. Those responsibilities are domain-specific to executing and reconciling financial transactions (not a generic automation or API-caller description). Even though specific vendor names (Stripe/PayPal) are not listed, the primary and explicit purpose is to manage and ensure correctness of payment execution and settlement, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 01:40 AM
Issues
1
Security Audit — snyk — payment-integration