growth-hacker
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes and instructs use of a Stripe MCP with payment/subscription commands (create_product, create_price, create_checkout_session, create_customer_portal_session) and directs the agent to call MCP tools to perform payments-related tasks. That is a specific payment gateway integration (Stripe) capable of creating products/prices and initiating checkout — i.e., direct financial execution authority, not a generic API or browser action.
Audit Metadata