azure-costs
Warn
Audited by Snyk on Jun 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes explicit, specific APIs to make billing/commitment transactions: e.g., "Purchase a 1-year VM reservation" via an az rest PUT to Microsoft.Capacity/reservationOrders (reservation purchase), and "az billing savings-plan create" to buy a Savings Plan. Those are direct financial/billing actions (committing/purchasing reserved capacity or savings plans) rather than generic API callers or browser automation, so the skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata