helio-cli
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes Helio CLI commands that explicitly initiate monetary actions: "tests create --dry-run" mentions a spend estimate (zero cost) and the workflow states "tests validate then tests send — ... launch (immediate; locks structure, charges answers)". The docs also instruct surfacing --dry-run and tests validate "before anything that touches money". These are explicit payment/charge operations (i.e., sending a transaction to charge for answers), so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata