cleeng
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The Cleeng skill is a domain-specific integration for subscriber retention and video monetization and explicitly surfaces financial-related entities (e.g., PaymentMethod, Offer, Customer) rather than being a generic browser or HTTP tool. It provides Membrane pre-built actions and a proxy that supports HTTP methods (POST/PUT/DELETE) to call Cleeng API endpoints, which can be used to create or modify payments, subscriptions, refunds, and payment methods. Because the skill is explicitly designed to interact with a monetization/payments platform (not a generic tool), it constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata