fabrick

Warn

Audited by Snyk on Apr 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is an explicit integration for Fabrick — an embedded finance platform offering banking, payments, and lending — and exposes Membrane CLI actions and a proxy to call Fabrick API endpoints. The doc shows how to create a connection (Membrane handles auth/refresh), run actions (membrane action run) and send arbitrary requests to Fabrick via the proxy (membrane request ... with -X POST/PUT/PATCH/DELETE and JSON body). Those capabilities are specifically designed to interact with financial APIs (payments/banking) and can be used to initiate transactions or manage accounts without requiring the user to supply raw credentials. This matches the definition of Direct Financial Execution (payment/banking API access).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 24, 2026, 10:47 AM
Issues
1