token

Warn

Audited by Snyk on Apr 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly built to integrate with Token (a payments/open-banking platform) and exposes domain-specific entities and actions such as "Token Transfer", "Wallet", "Address", and "Transaction". It instructs creating a Token connection and running Membrane actions (membrane action run ... --input '{...}') which are intended to invoke connector-specific operations. This is not a generic HTTP or browser automation tool — it is a payments/banking connector that can execute token transfers and transaction-related actions, i.e., send transactions/move money.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 28, 2026, 10:54 PM
Issues
1
Security Audit — snyk — token