altera-payroll

Warn

Audited by Snyk on Mar 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill is a dedicated Altera Payroll integration — explicitly for payroll processing (employee paychecks, payroll runs, managing employee payments). It exposes actionable operations via the Membrane CLI (membrane action run) and a proxied API request interface (POST/PUT/DELETE) with authentication handled for the connector. Those capabilities let an agent invoke payroll-run/paycheck endpoints and thus initiate or modify payment-related transactions. This is a specific financial integration (payroll/banking-style operations), so it meets the "direct financial execution" criterion.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 4, 2026, 08:55 AM