ai-storyboard-generator
Warn
Audited by Snyk on Nov 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill submits paid, billable calls to the hosted Beatra service that consume prepaid credits for generated storyboard images (direct financial operation: purchase of paid output), as described in "Show the user a cost card for exactly one paid call... Upload... submit once" and the Billing section. Access to this payment route is gated by a real OAuth device-flow bearer token issued and validated by Beatra's service (api.beatra.ai/mcp.beatra.ai), not merely agent-followed instructions, which constitutes independent, service-enforced access control over the payment route.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata