metronome

Warn

Audited by Snyk on Oct 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill configures usage-based billing integration and migration tools using Metronome and Stripe APIs, specifically handling invoicing, commits, credits, and subscription lifecycle changes (indirect financial operations, such as generating bills, invoices, and managing billing state). Under the evaluation framework, indirect financial operations (creating bills/invoices, submitting usage for billing) fall under indirect financial scope, which results in a medium severity rating.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 24, 2026, 07:01 AM
Issues
1