stripe-integration
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly a Stripe payment integration: it shows how to create Checkout Sessions and PaymentIntents via the Stripe SDK/APIs, uses publishable and secret API keys, handles webhook events including payment_intent.succeeded and charge.refunded, and discusses refund/dispute handling and saved-card (Stripe Link) functionality. These are concrete payment-gateway operations that initiate and manage financial transactions—i.e., direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata