invoice-ninja
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Invoice Ninja is an invoicing/payment platform whose domain is billing and accepting payments. The skill explicitly exposes payment-related entities and actions (Payment object, "List Payments", "Get Payment", "Create Invoice") and provides a Membrane proxy to call arbitrary Invoice Ninja API endpoints (including POST/other methods). Because this integration is specifically designed for financial operations and can be used to perform payment-related API calls (not just generic browsing), it constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata