vend

Warn

Audited by Snyk on May 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The Vend skill is explicitly a point-of-sale / retail management integration that exposes payment-related entities and operations (e.g., Sales Payment, Transaction Payment, Transaction Refund, Refund Payment, Invoice Payment, Store Credit, Gift Card, Open Balance Payment, Payments, Refunds). It uses Membrane actions to create/run operations against Vend (including creating transactions, payments, and refunds) and handles auth/credentials—i.e., the integration's primary capabilities include executing payment/refund operations. This is a specific financial execution capability, not a generic tool.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 5, 2026, 09:47 AM
Issues
1
Security Audit — snyk — vend