price-check

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly references and pulls data from payment/accounting platforms (QuickBooks and PayPal) as part of its workflow (e.g., "Pull QuickBooks revenue", "Pull PayPal gross sales"). These are specific financial connectors (payment gateway / accounting APIs) called out in the spec, which falls under the "Direct Financial Execution" criterion per the rules. Note: the skill appears read-only and even forbids updates, but the explicit use of PayPal/QuickBooks integrations is sufficient to flag it.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 12:24 PM
Issues
1
Security Audit — snyk — price-check