metronome-group-keys

Warn

Audited by Snyk on Oct 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill provides instructions and API examples for configuring billable metrics and contract pricing products via the Metronome API (POST /v1/billable-metrics/create and POST /v1/contract-pricing/products/create), which define usage-based billing structures and invoice pricing. This constitutes an indirect financial operation (creating billable usage and pricing definitions for downstream billing execution). Access control is established via API credentials (Authorization: Bearer $METRONOME_API_TOKEN).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 26, 2026, 07:17 PM
Issues
1