manage-orders-and-refunds
Warn
Audited by Snyk on Oct 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents operations for managing ticket orders, including refunding orders (SKILL.md:435-440), creating group invoices (SKILL.md:524), and setting up payment plans (SKILL.md:282). These constitute direct financial operations (refunds) and indirect financial operations (invoicing/billing). Access control is established via authenticated CLI login or Personal Access Tokens (
TICKET_FAIRY_API_KEY) (SKILL.md:19-21) and the MCP/Fai dashboard integration layers.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata