payments
Warn
Audited by Snyk on Mar 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to integrate with Stripe and implements concrete payment flows: creating Checkout Sessions/Payment Intents, creating subscriptions, handling webhooks as the payment source of truth, and calling the Refunds API. It requires and uses Stripe secret keys and includes functions that create charges/subscriptions and issue refunds (create_checkout_session, create_subscription, create_refund, stripe.Refund.create). These are direct payment gateway operations (moving/settling money), so this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata