manage-orders-and-refunds

Warn

Audited by Snyk on Oct 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents operations for managing ticket orders, including refunding orders (SKILL.md:435-440), creating group invoices (SKILL.md:524), and setting up payment plans (SKILL.md:282). These constitute direct financial operations (refunds) and indirect financial operations (invoicing/billing). Access control is established via authenticated CLI login or Personal Access Tokens (TICKET_FAIRY_API_KEY) (SKILL.md:19-21) and the MCP/Fai dashboard integration layers.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 23, 2026, 10:46 PM
Issues
1