create-auth-skill
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. While most of the skill is about authentication and generic integrations, the installation section explicitly lists a package "@better-auth/stripe" with the purpose "Stripe 支付" (Stripe payments). That is a specific payment-gateway integration (not a generic HTTP/click tool), and therefore indicates direct financial execution capability via a payment API. Other items (OAuth, DB adapters, browser handlers) are generic and not relevant, but the Stripe plugin is a direct financial tool.
Audit Metadata