ai-storyboard-generator

Warn

Audited by Snyk on Nov 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill submits paid, billable calls to the hosted Beatra service that consume prepaid credits for generated storyboard images (direct financial operation: purchase of paid output), as described in "Show the user a cost card for exactly one paid call... Upload... submit once" and the Billing section. Access to this payment route is gated by a real OAuth device-flow bearer token issued and validated by Beatra's service (api.beatra.ai/mcp.beatra.ai), not merely agent-followed instructions, which constitutes independent, service-enforced access control over the payment route.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 14, 2026, 05:13 AM
Issues
1