gpc-monetization
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill operates Google Play In-App Purchases and Subscriptions through the
gpcCLI, supporting direct financial actions such as executing refunds and order/subscription revocations (SKILL.md:405-412). These direct payment/refund operations are authenticated via Google Play Console service account credentials (gpc auth status,SKILL.md:27-28, 568), which represent established independent service-layer authentication controls. Therefore, it is a direct financial operation with qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata