openapi-invoicing
Warn
Audited by Snyk on Jun 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes payment and invoicing APIs: endpoints to create/send invoices to the Italian SDI (e.g., POST /IT-invoices, POST /invoices) and a realtime bill-payment API (ws.pagasubito.it) for bollettini, MAV, RAV, PagoPA, car tax. It also references wallet balance/reactivation and irreversible fiscal/financial actions. These are specific financial-execution capabilities (sending invoices/receipts to tax authorities and initiating payments), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata