setup
Warn
Audited by Snyk on Jun 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is specifically for Google Play Billing setup and includes explicit financial-execution actions: creating and activating paid products/subscriptions (setting prices), creating a Payments profile with bank/tax details, and provisioning service accounts with Play Console roles such as "Manage orders and subscriptions" (which enables verifying purchases, acknowledging transactions, revoking subscriptions, and issuing refunds). It also references using the Google Play Developer API (AndroidPublisher) to operate on in-app products and orders and sets up RTDN for purchase notifications — all specific payment-related capabilities. These are direct financial execution capabilities, not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata