metronome
Warn
Audited by Snyk on Oct 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill configures usage-based billing integration and migration tools using Metronome and Stripe APIs, specifically handling invoicing, commits, credits, and subscription lifecycle changes (indirect financial operations, such as generating bills, invoices, and managing billing state). Under the evaluation framework, indirect financial operations (creating bills/invoices, submitting usage for billing) fall under indirect financial scope, which results in a medium severity rating.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata