commerce-protocol-readiness
Warn
Audited by Snyk on Aug 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly defines protocols and flows for agent-performed payments and machine payments (e.g., "native agent checkout", "machine-to-machine payment", "secure payment handoff", "AP2: signed checkout and payment mandates that prove authorization for agent-performed payments", and "MPP: HTTP machine payments"). These entries indicate the skill is specifically intended to enable agents to execute payments (machine or agent-performed), not merely generic browsing or API discovery, so it constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata