upayments
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly an integration for a payment processor (UPayments). It exposes domain-specific entities (Payment, Invoice, Customer, Product, Tax Rate) and instructs using Membrane CLI to create connections and run connector actions (membrane action run) against the upayments connector. This is not a generic browser or HTTP tool — it is specifically designed to interact with a payment gateway and thus can be used to create/modify payments, invoices, and other financial transactions. That matches the "Payment Gateways / send transaction" category in the policy, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata