stripe-subscription
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe Checkout + Customer Portal integration for recurring subscriptions. It requires STRIPE_SECRET_KEY (a high-privilege secret), auto-creates subscription plans, and exposes endpoints like create-checkout-session and customer-portal to start/manage subscriptions and payment flows. This is a payment gateway integration (Stripe) designed to move/process money, so it grants direct financial execution capability.
Audit Metadata