Backend Express Development
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes billing endpoints (POST /checkout and /webhook) and configures raw body parsing for webhooks, and the User model contains lemonSqueezyCustomerId and lemonSqueezySubscriptionId. These elements indicate an explicit payment gateway integration (Lemon Squeezy) and routes to initiate and handle financial transactions, not just generic HTTP or automation capabilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata