microtech-graphql
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly an ERP GraphQL interface designed to create and book financial documents and manage payment-related data. The description and tables explicitly mention "Zahlungsverkehr und SEPA‑Mandate", bank/account fields (e.g., tblBnkVb with fldIBAN), payment-related parametertables (tblPaymentMethods, tblPaymentTerms, tblCurrencies), and open items. It exposes mutation functions that perform accounting actions: creating transactions/invoices (tblTransactions + rowNew/rowSave), posting/bookkeeping (fnPost), reversing (fnReverse), and converting documents (fnConvert). Those are specific, built-in financial operations (creating and sending booking transactions / invoices and manipulating payment records), not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata