software-android-native
Warn
Audited by Snyk on Aug 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly documents and instructs use of Google Play Billing APIs that perform payment-related actions: it names BillingClient, lifecycle integration (initialize in Application/Hilt singleton), purchase lifecycle operations (acknowledgePurchase(), consumeAsync()), purchase queries/listeners (PurchasesUpdatedListener, queryPurchasesAsync), and the server-side verification step. Those are specific payment APIs that directly participate in moving/settling purchases (i.e., financial execution), not generic tooling, so this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata