code-documentation-patterns
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill text explicitly references and shows code using a payment gateway (Stripe): environment variable STRIPE_SECRET_KEY in the README, examples and comments calling stripe.paymentIntents.create (and legacy stripe.charges.create), notes about Stripe webhook behavior and idempotency, and handling amounts in cents. These are concrete, specific payment API usages (payment gateway integration), which meet the "Direct Financial Execution" criterion.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata