stripe-link-cli

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents a CLI (stripe-link-cli) for requesting payment credentials, virtual cards, and shared payment tokens via Stripe Link, and executing payments using the Machine Payment Protocol (MPP) or retrieving card credentials for checkouts. This constitutes a direct financial operation (purchases/transfers/settlement execution). Independent access control is documented via the authentication mechanism (link-cli auth login, session files, and API authentication/verification URLs) and approval flows (requiring user approval through the Link mobile app or auth status checks) as specified in SKILL.md:58-91 and SKILL.md:19.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 11:44 PM
Issues
1