Invoice Automation
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates with payment gateways and accounting platforms and includes concrete API calls that perform financial actions. Evidence:
- Stripe examples: calls to stripe.invoices.create, stripe.invoiceItems.create, and stripe.invoices.sendInvoice (payment collection/invoice creation and sending).
- Multi-platform integration lists "Stripe" (recurring, one-time, subscriptions) and "QuickBooks" with "payments" capability, plus PayPal listed as a payment method.
- Recurring invoice setup includes auto_send and payment_terms; reconciliation includes bank feed matching and auto-matching rules.
These are specific, finance-focused operations (payment gateway APIs, invoice creation/sending, bank feed reconciliation) — not generic automation — so the skill grants direct financial execution authority.
Audit Metadata