sparebank1-transfers
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for executing real bank transfers via the SpareBank 1 CLI (
sb1). It defines concrete commands that move money (e.g.,sb1 transfer debit --from ... --to ... --amount ...,sb1 transfer creditcard --from ... --credit-card-id ... --amount ...,sb1 transfer pension --from ... --policy-number ... --amount ...). It even documents non-interactive execution with-yand returns payment IDs. These are specific, purpose-built financial execution actions (bank transfers/payments), not generic tooling, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata