video-presentation-maker

Warn

Audited by Snyk on Feb 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly integrates pay-per-use payment flows and tools: Nano Banana and Kling are "agent-pay" services with a $0.01 USDC charge per asset and require the x402 payment cycle. The prompt details creating a spending mandate, setting mandate amounts, and programmatically signing payments using fluxa-cli (node CLI_PATH x402-v3 --mandate MANDATE_ID --payload ...), extracting xPaymentB64, and retrying requests with an X-Payment header. It also instructs launching parallel subagents that perform the full payment signing and submission flow automatically using the user's FluxA Agent Wallet. These are concrete, specific payment operations (creating mandates and sending signed payment tokens) — not generic HTTP or browser actions — so this grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 24, 2026, 04:10 AM