integrate-backend
Warn
Audited by Snyk on Apr 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly references payment gateway integrations and examples that perform payment operations. It includes a sample ITEM ("Create PayPal Order") that lists PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET as secrets, examples describing "Add payment processing through Stripe" and "process the payment through Stripe," and data flows where server logic "calls PayPal" to create orders. These are specific, named payment gateway integrations (PayPal, Stripe) and describe server-side endpoints to perform payment actions. That matches the definition of Direct Financial Execution (payment gateways) rather than a generic API or automation tool, so it should be flagged.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata