laravel-cashier-stripe

Warn

Audited by Snyk on Oct 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill provides code and instructions for direct payment operations including creating subscriptions, processing one-time charges, invoicing, and refunds via Laravel Cashier and Stripe (SKILL.md:111-123, 243-244). These direct payment routes lack independent execution-layer access controls enforced on the operations themselves; while a billing portal route uses an auth middleware (SKILL.md:157-160), the core direct financial charges and subscription creation methods do not have independent controls documented at the operation execution level.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 13, 2026, 02:28 PM
Issues
1