paystack-disputes

Warn

Audited by Snyk on Oct 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The skill manages transaction disputes and chargebacks via the Paystack API, reading dispute lists and message histories where untrusted customer-submitted transaction or dispute details could contain indirect prompt injection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill manages transaction disputes and chargebacks, including updating and resolving disputes which can trigger refunds (direct financial operations). It depends on paystack-setup for the paystackRequest helper and authenticated API credentials, establishing independent service-level authentication control.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 9, 2026, 09:43 AM
Issues
2