mom-factura-testing
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payment API integration and testing tool. It defines payment endpoints (e.g., POST /api/payment/mcx, /api/payment/ekwanza, /api/payment/reference), requires an API key, accepts paymentInfo (amount, phoneNumber), and can return transactionId/invoiceUrl on success. Although examples focus on QA simulation (simulateResult) the documentation is specifically for payment processing and includes a pre-production checklist that instructs removing QA headers to use real transactions. This is a specific financial/payments interface (a payment gateway integration), not a generic tool, so it grants direct financial execution capability.
Audit Metadata