clean-architecture

Warn

Audited by Snyk on Feb 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill includes an explicit payment execution integration: the application service example invokes PaymentGateway.charge(order.getTotal()) and handles a PaymentResult (tx id, success/failure). That is a payment-specific API/function designed to perform money-moving operations (charging orders), not a generic interface like a browser or HTTP caller. Therefore it provides direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 23, 2026, 11:21 PM