laravel-billing
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for payments and billing: it integrates Stripe and Paddle (payment gateways) via Laravel Cashier and includes direct payment operations such as creating subscriptions (newSubscription->create), charging customers ($user->charge), invoicing ($user->invoiceFor), issuing refunds ($user->refund), and handling billing portal redirects and payment webhooks. These are specific APIs/operations intended to move money, so this is Direct Financial Execution capability.
Audit Metadata