workflow-creation
Warn
Audited by Snyk on Jul 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes and instructs use of quote_workflow_run and launch_workflow_run (and their CLI equivalents) and requires passing/confirming reservedMillicredits / --max-reserved-millicredits to execute a launch. It states "Launching spends real credits" and prescribes quoting and launching behavior that causes real monetary/credit expenditure. Those are explicit APIs/operations to execute spend on behalf of the user, so this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata