commet-webhooks

Warn

Audited by Snyk on Apr 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a billing/payment integration: it documents Commet webhook events like payment.received, payment.failed, subscription.* and shows use of a Commet SDK (commet.subscriptions.get, commet.features.check). This is a specific financial/billing API (analogous to a payment gateway) rather than a generic tool, so it constitutes direct financial execution authority/risk even though this specific webhook handler focuses on receiving events and querying subscription/payment state.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 8, 2026, 03:42 PM
Issues
1