pr-template-generator

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill prompt includes explicit, payment-specific APIs and functions (e.g., PaymentProvider interface and provider implementations for Stripe/PayPal/Square with methods like createPaymentIntent, capturePayment, refundPayment, createCustomer, attachPaymentMethod, and orchestration code processPayment). Those are concrete payment gateway operations (move/capture/refund money) and configuration examples referencing API keys/webhook secrets. Even though the skill's surface purpose is PR template generation, the documentation explicitly defines and documents direct financial execution primitives. Therefore it meets the criteria for Direct Financial Execution Authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:15 AM