runpod-pod-deploy

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill provisions and manages cloud compute resources (Runpod Pods and network/global volumes) via MCP tools like create-pod, pod-action, and delete-pod which incur real-world hourly billing and costs, constituting a direct financial operation (purchases/charges). However, the skill documentation relies entirely on the underlying MCP server/API connection and session tool bindings for authentication and execution, lacking any documented independent access control or authorization mechanism enforced by the skill's own execution layer.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 04:11 PM
Issues
1