saas-scaffolder

Warn

Audited by Snyk on Apr 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly implements payment gateway integrations: it scaffolds Stripe (and mentions LemonSqueezy) client code, includes env vars for STRIPE keys, provides server routes that call stripe.customers.create and stripe.checkout.sessions.create, builds checkout and customer portal routes, and handles webhooks that update subscription IDs in the DB. These are explicit APIs and flows to create customers, start subscriptions, and process payments — i.e., direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 5, 2026, 08:06 PM
Issues
1
Security Audit — snyk — saas-scaffolder