unionpay-apis
Warn
Audited by Snyk on Jun 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). 该文档明确描述并示例了中国银联的在线支付接口及 SDK 用法,包含用于发起消费(txnType=01)、预授权/完成(02/03)、退货/退款(txnType=04)、无跳转(Token)支付、生成二维码支付、主扫/被扫、服务端调用获取 TN、以及调用后端交易接口(AcpService.post 到 backTransUrl/frontTransUrl/appTransUrl)等具体支付操作。示例函数(gatewayPay、getAppTn、tokenPay、createQrCode、scanUserQr、refund 等)直接构造并发送支付/退款请求,明确用于移动资金和发起/撤销交易。因此该 skill 是专门针对支付网关的、具备直接财务执行能力。
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata