openpay-mexico
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payment integration for OpenPay (Mexican market) and includes direct REST API client code that sends authenticated requests using a PRIVATE_KEY to create charges. It exposes specific functions that execute payments: createCardCharge, createSpeiCharge, and createOxxoCharge, plus webhook handling and payment flow logic. These are clearly specific tools to move money (payment gateway operations), not generic interfaces.
Audit Metadata