azure-costs

Warn

Audited by Snyk on Jun 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill includes explicit, specific APIs to make billing/commitment transactions: e.g., "Purchase a 1-year VM reservation" via an az rest PUT to Microsoft.Capacity/reservationOrders (reservation purchase), and "az billing savings-plan create" to buy a Savings Plan. Those are direct financial/billing actions (committing/purchasing reserved capacity or savings plans) rather than generic API callers or browser automation, so the skill grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 23, 2026, 08:43 AM
Issues
1
Security Audit — snyk — azure-costs