token
Warn
Audited by Snyk on Apr 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to integrate with Token (a payments/open-banking platform) and exposes domain-specific entities and actions such as "Token Transfer", "Wallet", "Address", and "Transaction". It instructs creating a Token connection and running Membrane actions (membrane action run ... --input '{...}') which are intended to invoke connector-specific operations. This is not a generic HTTP or browser automation tool — it is a payments/banking connector that can execute token transfers and transaction-related actions, i.e., send transactions/move money.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata