create-auth-skill

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. While most of the skill is about authentication and generic integrations, the installation section explicitly lists a package "@better-auth/stripe" with the purpose "Stripe 支付" (Stripe payments). That is a specific payment-gateway integration (not a generic HTTP/click tool), and therefore indicates direct financial execution capability via a payment API. Other items (OAuth, DB adapters, browser handlers) are generic and not relevant, but the Stripe plugin is a direct financial tool.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:02 PM