crowdpower
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes CrowdPower-specific actions that explicitly create and record monetary transactions: notably the "Create Charge" action ("Create a charge for a customer in CrowdPower to track revenue") and the "Track" action which can "send events, charges, and tags." The Membrane CLI instructions show how to run those actions (membrane action run ...) against a connected account, which performs those operations server-side. Because these are specific, named financial operations (creating charges) rather than generic tooling, this constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata