sales-memberstack
Warn
Audited by Snyk on Jul 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly references payment flows and API endpoints that manage billing/subscriptions: it mentions Stripe checkout, transaction/Stripe fees, the Admin REST API with secret keys (
sk_sb_/sk_live_), and "add/remove-plan" endpoints. Those are specific payment-related capabilities (payment gateway & subscription management) that can be used to execute or change financial actions for members, so this counts as Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata