pr-template-generator
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill prompt includes explicit, payment-specific APIs and functions (e.g., PaymentProvider interface and provider implementations for Stripe/PayPal/Square with methods like createPaymentIntent, capturePayment, refundPayment, createCustomer, attachPaymentMethod, and orchestration code processPayment). Those are concrete payment gateway operations (move/capture/refund money) and configuration examples referencing API keys/webhook secrets. Even though the skill's surface purpose is PR template generation, the documentation explicitly defines and documents direct financial execution primitives. Therefore it meets the criteria for Direct Financial Execution Authority.
Audit Metadata