axiom-in-app-purchases
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to implement in-app payments and subscription management via StoreKit (StoreKit 2). It contains concrete payment-facing APIs and flows — e.g., Product.purchase(confirmIn:), Transaction.updates, AppStore.sync(), transaction.finish(), appAccountToken usage, server-side receipt validation, subscription purchase/renewal handling and restore/refund flows. This is not a generic tool; it is a payment integration for moving money (charging users via the App Store) and managing entitlements, so it provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata