aip-setup
Warn
Audited by Snyk on Oct 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill sets up an AI Producer integration and starts projects via
start_project_from_attachment, which references purchasing/charging operations based on pricing details and quotas (SKILL.md:62-63, 78). This represents a direct financial operation (purchasing/charging for project creation). The connection and authentication mechanisms are handled via client-specific MCP login and sign-in steps (SKILL.md:36-39) rather than an independent service-enforced cryptographic validation or credential-gated authorization on the tool call itself within the skill's documented execution path.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata