axiom-storekit-ref
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documents Apple's StoreKit 2 and App Store Server APIs and includes explicit purchase and transaction operations: product.purchase(confirmIn:), grant/finish transaction flows, App Store Server endpoints (PATCH /inApps/v1/transactions/{...}, PUT /inApps/v2/transactions/consumption/{...}), promotional offer signature creation, and refund/consumption controls. These are specific APIs intended to initiate and manage real monetary purchases and transaction state (including refunds and consumption), so it provides direct financial execution capabilities.
Audit Metadata