integrate-backend

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly references payment gateway integrations and examples that perform payment operations. It includes a sample ITEM ("Create PayPal Order") that lists PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET as secrets, examples describing "Add payment processing through Stripe" and "process the payment through Stripe," and data flows where server logic "calls PayPal" to create orders. These are specific, named payment gateway integrations (PayPal, Stripe) and describe server-side endpoints to perform payment actions. That matches the definition of Direct Financial Execution (payment gateways) rather than a generic API or automation tool, so it should be flagged.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 11:50 PM
Issues
1