stripe-sync-backfill
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a specific Stripe integration: it requires a Stripe secret key, configures stripe-sync-engine, and calls stripeSync.syncBackfill and stripeSync.syncSingleEntity. It explicitly works with Stripe payment-related object types (payment_intent, charge, payment_method, invoice, etc.) and exposes API endpoints and scripts to run those Stripe operations. Because this is a focused payment-gateway integration (Stripe) rather than a generic tool, it meets the criteria for direct financial execution authority.
Audit Metadata