axiom-storekit-ref

Warn

Audited by Snyk on Feb 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documents Apple's StoreKit 2 and App Store Server APIs and includes explicit purchase and transaction operations: product.purchase(confirmIn:), grant/finish transaction flows, App Store Server endpoints (PATCH /inApps/v1/transactions/{...}, PUT /inApps/v2/transactions/consumption/{...}), promotional offer signature creation, and refund/consumption controls. These are specific APIs intended to initiate and manage real monetary purchases and transaction state (including refunds and consumption), so it provides direct financial execution capabilities.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 28, 2026, 03:05 AM