stripe-knowledge-patch
Warn
Audited by Snyk on Apr 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe-specific knowledge patch and includes concrete Stripe API calls that create and manage payments, subscriptions, accounts, credits, and crypto payment intents. Examples: checkout.sessions.create (creating payment sessions), stripe.paymentIntents.create, stripe.subscriptions.create, stripe.billing.creditGrants.create, accounts v2 (connect account creation), and explicit "Crypto Payments" examples. These are payment-gateway operations (and include crypto and credit-granting APIs), not generic tooling. Therefore it grants Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata