fictiv
Warn
Audited by Snyk on Nov 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill operates a manufacturing marketplace (Fictiv) via browser automation to configure parts, request quotes, and place orders with real money (SKILL.md:15, 33, 116). This constitutes a direct financial operation (purchasing/trades/settlement authorization). Access control relies on the user's logged-in browser session (SKILL.md:5, 15), which is an authenticated session/business access check enforced by the service layer, qualifying as independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata