fabrick
Warn
Audited by Snyk on Apr 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an explicit integration for Fabrick — an embedded finance platform offering banking, payments, and lending — and exposes Membrane CLI actions and a proxy to call Fabrick API endpoints. The doc shows how to create a connection (Membrane handles auth/refresh), run actions (membrane action run) and send arbitrary requests to Fabrick via the proxy (membrane request ... with -X POST/PUT/PATCH/DELETE and JSON body). Those capabilities are specifically designed to interact with financial APIs (payments/banking) and can be used to initiate transactions or manage accounts without requiring the user to supply raw credentials. This matches the definition of Direct Financial Execution (payment/banking API access).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata