partner-skill-name
Warn
Audited by Snyk on Mar 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly requires and documents use of the MoonPay CLI (mp) and a partner CLI, includes authentication steps (mp login → mp verify), references a "funded wallet" and API keys, and lists real CLI commands for mp. MoonPay is a payment/on‑ramp service (a specific payment gateway/crypto fiat service), so this skill is specifically designed to perform financial operations (sending/buying crypto or moving funds) rather than being a generic tool. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata