hokodo

Warn

Audited by Snyk on May 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a targeted integration for Hokodo, a B2B Buy Now, Pay Later/payment platform. The documentation explicitly references financial objects and operations (Credit Application, Credit Line, Transaction, Invoice, Merchant) and instructs using Membrane actions to run operations against Hokodo (create/list/run actions). This is not a generic browser or HTTP tool — it’s specifically designed to interact with a payments/credit provider and thus can perform financial operations (e.g., create transactions, manage credit). Under the core rule, that constitutes direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 2, 2026, 11:33 AM
Issues
1
Security Audit — snyk — hokodo