laravel-cashier-stripe
Warn
Audited by Snyk on Oct 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill provides code and instructions for direct payment operations including creating subscriptions, processing one-time charges, invoicing, and refunds via Laravel Cashier and Stripe (SKILL.md:111-123, 243-244). These direct payment routes lack independent execution-layer access controls enforced on the operations themselves; while a billing portal route uses an auth middleware (SKILL.md:157-160), the core direct financial charges and subscription creation methods do not have independent controls documented at the operation execution level.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata