GHL API v2 & Integrations
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes payment-related endpoints and scopes. It documents /payments/orders, /payments/transactions, /payments/subscriptions and a POST /payments/custom-provider/ endpoint, lists payments.readonly / payments.write scopes, and even references a native Stripe integration. These are specific APIs for handling orders/transactions and creating payment providers — i.e., capabilities to execute or manage financial transactions rather than generic HTTP or UI automation. Therefore it contains direct financial execution capability.
Audit Metadata