flowglad-setup
Warn
Audited by Snyk on Feb 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly a billing/payment integration: it instructs installing and configuring the Flowglad SDK, creating FlowgladServer instances scoped to customers, handling secret API keys (FLOWGLAD_SECRET_KEY), exposing API route handlers (nextRouteHandler / expressRouter) that forward requests to Flowglad, and example calls like flowglad(...).getBilling() and checkout routes. These are specific payment/billing APIs (a payment gateway-style SDK) intended to create customers, handle checkouts and forward transactions — i.e., directly enable financial operations.
Audit Metadata