third-party-integration
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements payment-processor integrations and calls that move money. It includes concrete Stripe usage (stripe.charges.create, stripe.refunds.create, createCharge and refund methods), a PaymentGateway class with create_payment and refund, webhook handling, and guidance for integrating payment processors (Stripe, PayPal). These are specific, finance-focused APIs that perform transactions and refunds (i.e., send/authorize payments), so it grants direct financial execution capability.
Audit Metadata