bootstrapping-agent
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill ships a typed StripeConnector and an agent tool stripe_execute that calls connector.execute(entity, action, params). This is a specific, explicit integration with a payment gateway (Stripe) and is therefore a direct financial execution capability (it can call Stripe APIs to access/manage customers, invoices, balances and likely other Stripe actions). It uses AirbyteAuthConfig (client id/secret) for direct authenticated access. This meets the criteria for Direct Financial Execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata