better-auth

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes a "Stripe" plugin and repeatedly references Stripe-specific payment/subscription functionality (e.g., "Stripe: Payment and subscription management", "Stripe enhancements
  • Flexible subscription lifecycle, disableRedirect option", and "Stripe" listed under Advanced Plugins). Stripe is a payment gateway; this is a specific financial integration (not a generic HTTP or browser tool). Because it exposes payment/subscription management capabilities tied to a concrete gateway, it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 10:25 PM