paddle-catalog-setup
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates with the Paddle payment platform (a payment gateway) and provides concrete API/SDK calls that perform write operations on a merchant's catalog: examples show client.products.create and client.prices.create via the MCP
executetool and paddle.prices.create / paddle.products.create via the Node SDK. It also requires a PADDLE_API_KEY with product.write and price.write scopes. These are specific payment-gateway APIs (not generic tools) that grant the agent authority to modify a live payments catalog and thus constitute Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata