metronome-group-keys
Warn
Audited by Snyk on Oct 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides instructions and API examples for configuring billable metrics and contract pricing products via the Metronome API (
POST /v1/billable-metrics/createandPOST /v1/contract-pricing/products/create), which define usage-based billing structures and invoice pricing. This constitutes an indirect financial operation (creating billable usage and pricing definitions for downstream billing execution). Access control is established via API credentials (Authorization: Bearer $METRONOME_API_TOKEN).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata