gift-up-automation
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly targeted at the Gift Up toolkit (a gift-card / payment platform) and requires an active Gift Up connection before executing discovered tools. The workflow centers on discovering and invoking Gift Up-specific tool slugs via RUBE_MULTI_EXECUTE_TOOL (with schema-compliant args). While the prompt doesn't list exact endpoints, the skill is specifically designed for a payment/gift-card integration (i.e., financial operations such as issuing gift cards, processing orders/refunds or other payment-related actions) rather than being a generic automation tool. That specificity to a payment/gift platform constitutes direct financial execution capability.
Audit Metadata