openfactura-conectar
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill is a connection and setup guide for Open Factura, an electronic invoicing platform for El Salvador's tax authority. Its documented purpose includes configuring agent access with production keys (
of_live_…, documents with legal value before Hacienda) and grantingdte:emitfor "Facturar", and it points to theopenfactura-facturarskill for emitting documents. Creating real invoices is an indirect financial operation, so it is in scope. The skill does not itself process a payment, transfer, refund or trade, so there is no direct operation and the independent-access-control test does not apply. Because the operation is indirect, the tier is medium. The evidence is that the skill configures an agent to create legally binding invoices, though the emission step is delegated to another skill.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata