uipath-functions
Warn
Audited by Snyk on Oct 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill describes creating and authoring UiPath Coded Functions (deterministic Python and TypeScript/JavaScript units of business logic, such as invoice approval, ERP queries, and data transforms) as well as scaffolding, testing, packaging, and publishing them. The documentation includes code examples that implement financial approval logic (e.g., invoice approval handling based on amount thresholds with authentication checks: SKILL.md:121-122). This constitutes an indirect financial operation (invoice processing and business logic rules for approval) with documented authentication controls (
ctx.user?.accessTokencheck andFunctionError("Unauthorized", 401)). Therefore, it falls under indirect operations which are classified as medium severity.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata