storekit
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically about implementing and invoking in-app purchases and subscription payments via StoreKit 2. It includes concrete APIs and actions to initiate payments and manage transactions (e.g., product.purchase(options:), using PurchaseAction / StoreView to initiate purchases, AppStore.sync() for restore, Transaction.updates handling, verification and transaction.finish()). These are not generic utilities but direct payment/transaction operations for moving money (purchases/subscriptions), so it grants Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata