cashfree

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation and execution of an external CLI tool via npm (@membranehq/cli), which constitutes an operational runtime dependency from a third-party source.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates Cashfree, which is explicitly a payments platform and payment gateway for online payments, bank transfers, orders, and refunds. The skill documentation explicitly discusses interacting with Cashfree payments, orders, and payouts via the Membrane CLI, granting the agent direct financial execution authority through payment and transfer capabilities.