spree-security
Warn
Audited by Snyk on Jul 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly discusses payment gateways (Stripe, Adyen, PayPal), references Stripe secret keys and how to read them, documents gateway credential storage and rotation, and calls out API scopes like "write_refunds" (i.e., creating refunds). These are specific, payment-focused integrations (not generic tooling), so the skill contains direct financial execution capabilities / access patterns and should be flagged.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata