mp-notifications
Warn
Audited by Snyk on May 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly tied to a payment gateway (Mercado Pago) and is specifically designed for payment-related integrations (webhooks/IPN, HMAC validation, fetching payment/subscription/order resources, webhook configuration endpoints like save_webhook, notifications_history). Although it focuses on receiving and validating notifications (not creating payments), it is a targeted payment-gateway integration rather than a generic tool — therefore it falls under the "Payment Gateways" category of direct financial capabilities per the rules.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata