commet-webhooks
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a billing/payment integration: it documents Commet webhook events like payment.received, payment.failed, subscription.* and shows use of a Commet SDK (commet.subscriptions.get, commet.features.check). This is a specific financial/billing API (analogous to a payment gateway) rather than a generic tool, so it constitutes direct financial execution authority/risk even though this specific webhook handler focuses on receiving events and querying subscription/payment state.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata