cloudbase-wechat-integration
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about integrating and operating WeChat Pay (mentions WeChat payment, 小程序支付, 微信支付, JSAPI 支付, wx.requestPayment, WeixinJSBridge, refund/payment callbacks, generated payment functions like pay-common, order creation, code_url/QR pay, and server-side payment queries/callback handling). These are specific payment gateway integration capabilities (WeChat Pay) enabling financial transactions, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata