storekit

Warn

Audited by Snyk on Jun 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly and specifically about implementing and invoking in-app purchases and subscription payments via StoreKit 2. It includes concrete APIs and actions to initiate payments and manage transactions (e.g., product.purchase(options:), using PurchaseAction / StoreView to initiate purchases, AppStore.sync() for restore, Transaction.updates handling, verification and transaction.finish()). These are not generic utilities but direct payment/transaction operations for moving money (purchases/subscriptions), so it grants Direct Financial Execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 08:52 PM
Issues
1