growth-hacker

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes and instructs use of a Stripe MCP with payment/subscription commands (create_product, create_price, create_checkout_session, create_customer_portal_session) and directs the agent to call MCP tools to perform payments-related tasks. That is a specific payment gateway integration (Stripe) capable of creating products/prices and initiating checkout — i.e., direct financial execution authority, not a generic API or browser action.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:25 AM