splice-credits-and-pricing
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents buying credit packs via an agent API (
POST https://splice.film.fun/api/agents/credits/purchase) which initiates a direct purchase/settlement operation (Solana USDC/SOL/AUDD payments). This direct payment operation is authenticated via an agent key (sk_ agent key/ OAuth sign-in to the Splice service API), establishing independent service-layer authentication for the route.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata