unionpay-apis

Warn

Audited by Snyk on Jun 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). 该文档明确描述并示例了中国银联的在线支付接口及 SDK 用法,包含用于发起消费(txnType=01)、预授权/完成(02/03)、退货/退款(txnType=04)、无跳转(Token)支付、生成二维码支付、主扫/被扫、服务端调用获取 TN、以及调用后端交易接口(AcpService.post 到 backTransUrl/frontTransUrl/appTransUrl)等具体支付操作。示例函数(gatewayPay、getAppTn、tokenPay、createQrCode、scanUserQr、refund 等)直接构造并发送支付/退款请求,明确用于移动资金和发起/撤销交易。因此该 skill 是专门针对支付网关的、具备直接财务执行能力。

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 20, 2026, 02:29 PM
Issues
1