mediaio-generate
Warn
Audited by Snyk on Oct 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates a CLI (
mediaio generate create) that spends user credits to generate images and videos, representing a direct financial operation (charges/purchases against user credits). However, the CLI commands require pre-existing account authentication (mediaio auth login), explicit interactive parameters (--yes), and optional credit estimation/approval flows managed via the user's account session, lacking an independent service-enforced access validation or control layer at the payment execution routing level itself (other than user-interactive approval prompts). Thus, it is a direct operation without established qualifying independent control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata