polar-billing
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a billing system tightly integrated with Stripe and contains multiple concrete methods and tasks that move money: StripeService methods like create_payment_intent(), create_refund(), transfer(), create_payout(); webhook endpoints that process payment_intent/charge/refund/payout events; services and tasks that trigger payments (order.trigger_payment, order.process_dunning_order attempts payments via Stripe) and initiate payouts (payout.trigger_stripe_payouts). These are specific payment gateway and payout operations (not generic API callers or browser automation), so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata