account-deletion-flow-android
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill's backend delete endpoint explicitly calls a subscription-management API: "await revenueCat.subscriber.delete(userId);" (SKILL.md:47). This is a specific third-party billing/subscription operation that cancels active subscriptions and therefore directly affects user billing/payment state. Because it invokes a concrete payment/subscription API (not a generic caller), it constitutes direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata