grep-upgrade
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates with Stripe and billing scripts to create checkout sessions and initiate payments. It instructs the agent to run node "${SCRIPTS_DIR}/billing.js" checkout and billing.js payg <amount_cents>, create/open Stripe checkout URLs, and convert deposit amounts to cents for payment. Because these are specific payment actions (Stripe checkout creation and pay-as-you-go payment initiation), this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata