alchemy
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly lists a Stripe provider ("alchemy/stripe") with Stripe-specific resources (WebhookEndpoint, Price, Product, Coupon, and 10+ more). That is a concrete payment-gateway integration rather than a generic API caller or browser automation, so it constitutes a specific tool for payment gateway management and therefore qualifies as direct financial execution capability under the rules.
Audit Metadata