soku-cli-integration

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The SKILL is explicitly designed to manage advertising accounts and perform delivery-changing writes: it includes commands to create ad campaigns (soku ads meta campaign create) and a review workflow with a command to approve reviews (soku review approve <review_id>) which executes those changes. Those operations directly affect ad spend/budgeting (i.e., financial execution on ad platforms). Although the docs note a human review gate, the CLI provides the explicit approve action that enacts the write. This qualifies as direct financial execution authority for ad spend management.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 12:39 AM
Issues
1
Security Audit — snyk — soku-cli-integration