sales-gumroad

Warn

Audited by Snyk on Apr 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about the Gumroad commerce platform — setting up stores, handling sales/subscriptions, webhooks, and the Gumroad REST API. It references API endpoints (e.g., license verification), webhook handling for sales, payout behavior, and refund rules. Because this skill is specifically designed around a payment/merchant platform and its API/webhooks (i.e., a tool whose primary purpose is handling transactions, sales data, and payout/refund flows), it constitutes a specific financial-operation integration rather than a generic tool. Therefore it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 20, 2026, 06:35 PM
Issues
1