treasury-prime
Warn
Audited by Snyk on Apr 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill integrates directly with Treasury Prime, a banking-as-a-service platform, and exposes banking-specific objects and actions such as Payment Order, Wire, Transaction, Account (Balance), Counterparty, and Return. It uses the Membrane CLI to discover and run connection-scoped actions (membrane action run ... --input '{...}'), which can create or execute Payment Orders and Wires. This is not a generic automation tool — it is explicitly designed to interact with banking APIs and initiate financial transfers. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata