Stripe Payments
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payment integration and contains direct payment APIs and flows (e.g., stripe.checkout.sessions.create, stripe.paymentIntents.create, stripe.confirmCardPayment, stripe.subscriptions.create/update, stripe.refunds.create), invoice collection (collection_method: charge_automatically), webhook handlers for payment events, and dunning/retry/cancel actions. These are specific tools and operations designed to create charges, capture payments, manage subscriptions, and issue refunds — i.e., directly move/manage money.
Audit Metadata