mercado-pago
Warn
Audited by Snyk on Apr 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly an integration with a payment gateway (Mercado Pago) and its documented capabilities include "Payment", "Refund", "Point of Sale", and "Merchant Order". It describes how to create a connection to Mercado Pago and how to discover and run actions via the Membrane CLI (e.g.,
membrane action run ... --input ...) — which is a direct mechanism to invoke payment/refund operations. This is a purpose-built financial integration (not a generic tool) for moving money and managing transactions, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata