pipa-follow-up-reminders
Warn
Audited by Snyk on Jul 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements a "top-up" / purchase flow: it directs the agent to call a payment-related API (POST /v1/topups/checkout-sessions), create checkout sessions for buying credits, and share returned checkout/billing URLs. This is a specific payment/checkout integration (user-facing purchase flow), so it grants direct financial execution capability (creating payment sessions and initiating purchases).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata