mom-factura-testing

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a payment API integration and testing tool. It defines payment endpoints (e.g., POST /api/payment/mcx, /api/payment/ekwanza, /api/payment/reference), requires an API key, accepts paymentInfo (amount, phoneNumber), and can return transactionId/invoiceUrl on success. Although examples focus on QA simulation (simulateResult) the documentation is specifically for payment processing and includes a pre-production checklist that instructs removing QA headers to use real transactions. This is a specific financial/payments interface (a payment gateway integration), not a generic tool, so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 12:36 AM