NYC

axiom-in-app-purchases

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to implement in-app payments and subscription management via StoreKit (StoreKit 2). It contains concrete payment-facing APIs and flows — e.g., Product.purchase(confirmIn:), Transaction.updates, AppStore.sync(), transaction.finish(), appAccountToken usage, server-side receipt validation, subscription purchase/renewal handling and restore/refund flows. This is not a generic tool; it is a payment integration for moving money (charging users via the App Store) and managing entitlements, so it provides direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:30 PM