composable-commerce
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates payment gateways and payment flows. It lists Stripe (and Adyen, Braintree) in required services, requires a Stripe account and API keys, and shows payment-related code and orchestration (e.g., capturePayment(paymentIntentId), PaymentCaptured/PaymentFailed events). These are specific payment gateway operations (sending/capturing transactions), so it grants Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata