vercel-cli-with-tokens
Warn
Audited by Snyk on Oct 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill includes explicit instructions and commands for managing Stripe projects and performing paid plan upgrades (e.g.,
stripe projects add vercel/proorstripe projects upgrade vercel-plan pro) which bill a real card as documented in lines 286-294. This constitutes a direct financial operation (charges/purchases/subscription changes) initiated via CLI commands without independent qualifying access control enforced by the skill execution environment (it relies on human prompts/instructional warnings rather than independent service-layer validation checks). Therefore, this is a direct financial operation without qualifying access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata