storage-analyzer-khazix

Warn

Audited by Snyk on Nov 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates a local server (server.py) that performs file deletion and moves files to the trash based on user actions in the generated interactive HTML report (direct file system modifications via rm and trash). It qualifies as a direct financial/operational action on the local environment without independent service-layer access controls or authentication validating those specific delete actions beyond local script execution and token/host checks. Therefore, it is a direct operation without qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 3, 2026, 08:59 AM
Issues
1