lovable-checkout
Warn
Audited by Snyk on Jun 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about integrating a specific payment gateway (SolvaPay). It references a SolvaPay API base URL (https://api-dev.solvapay.com), a secret key name (SOLVAPAY_SECRET_KEY), and instructions for routing backend calls through Supabase edge functions (i.e., server-side payment API integration and hosted checkout). This is a targeted payment integration (direct financial execution capability), not a generic tool.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata