fairstack-sfx-library
Warn
Audited by Snyk on Mar 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes a specific API endpoint that performs a monetary charge: POST /api/sfx/:id/use "Uses a sound effect in your project. Deducts $0.001 (1,000 microdollars) and returns the download URL." Calling that endpoint with the API key causes an immediate credit/billing action. This is an explicit, non-generic financial operation (sending a charge/deducting funds) rather than a general-purpose tool, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata