abacatepay
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payment-gateway integration helper (AbacatePay). It includes SDK initialization with an API key and concrete API calls that create and manage money-moving operations: abacate.billing.create (creates billings/payments), abacate.pixQrCode.create (creates PIX payment/QR), pixQrCode.simulatePayment (triggers payment simulation), plus webhook events for billing.paid and withdraw.done/failed. These are specific payment gateway operations (creating payments, handling withdrawals/subscriptions), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata