zo-space
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes the Stripe SDK in the server-side packages and documents "Using Stripe webhooks", plus it exposes server-side runtime with access to environment secrets (process.env.STRIPE_SECRET_KEY) and outbound network/fetch. Those elements are specific, built-in payment integration capabilities (payment gateway) that enable sending and handling financial transactions. This meets the "Direct Financial Execution" criteria.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata