openfactura-conectar

Warn

Audited by Snyk on Nov 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill is a connection and setup guide for Open Factura, an electronic invoicing platform for El Salvador's tax authority. Its documented purpose includes configuring agent access with production keys (of_live_…, documents with legal value before Hacienda) and granting dte:emit for "Facturar", and it points to the openfactura-facturar skill for emitting documents. Creating real invoices is an indirect financial operation, so it is in scope. The skill does not itself process a payment, transfer, refund or trade, so there is no direct operation and the independent-access-control test does not apply. Because the operation is indirect, the tier is medium. The evidence is that the skill configures an agent to create legally binding invoices, though the emission step is delegated to another skill.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 12, 2026, 04:56 PM
Issues
1