secure-error-handling

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill includes an explicit payment gateway integration: Example 2 imports and instantiates Stripe with STRIPE_SECRET_KEY and calls stripe.paymentIntents.create({ amount, currency, payment_method, confirm: true, metadata }). This is a specific API for processing payments (creating/confirming payment intents) — i.e., direct financial execution via Stripe — so it meets the criteria for Payment Gateways.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:23 AM