mp-wallet
Warn
Audited by Snyk on Mar 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform payment operations with Mercado Pago: it describes Wallet Connect OAuth to obtain user-scoped tokens and "use the token to access the user's wallet features (read balance, create charges)"; it covers "Debt Payment" flows (create debt records, generate/send payment requests) and "Massive Payment Links" (bulk generation of payment links and APIs to submit batches and monitor payment status). It lists specific endpoints to create debt payments, batch-generation APIs, and token exchange/refresh endpoints. These are concrete, payment-specific integrations (send charges, collect debts, generate payment links) — not generic browser or API tooling — so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata