fis

Warn

Audited by Snyk on Apr 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a dedicated integration for FIS, a financial/banking software, and explicitly exposes domain entities and operations such as "Payment", "Invoice", "Trust Account", "Billing Rule", "Expense", and "Settlement". It documents using the Membrane CLI to run connector actions and to proxy arbitrary HTTP requests (POST/PUT/DELETE etc.) to the FIS API with authenticated credentials. Because this is a purpose-built financial connector able to create/update payment-related resources and send transactional requests to a banking/financial API, it constitutes explicit direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 22, 2026, 04:39 PM
Issues
1