openfactura-errores
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). Decisive operation: the skill governs real DTE (electronic tax invoice) issuance and annulment through Open Factura. It directs re-issuing documents after rejection or uncertain emission (lines 13-15, 23, 27), transmitting contingency documents to Hacienda (lines 39-45), and invalidating documents via
dte_invalidar(lines 49-65). Creating real bills is an indirect operation. Annulment is a fiscal action on those bills, not a transfer, charge, refund or settlement, so it does not make the route direct. No direct payment operation is established, so the access-control test does not apply. Severity is medium because an indirect financial operation is in scope.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata