payment-integration
Warn
Audited by Snyk on Feb 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. The skill is explicitly for payment gateway integration (Toss Payments, Stripe) and contains concrete code and instructions to perform payment actions: loading Toss SDK and calling requestPayment on the client, server-side code that calls the Toss Payments confirm API with secret keys, webhook handling, and Stripe Billing/subscription management. These are specific financial APIs and transaction-confirming calls (i.e., designed to move money), so it meets the Direct Financial Execution criteria.
Audit Metadata