stripe-payment-links
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe Payment Links integration — a payment-gateway-specific tool. It describes creating and managing Stripe Payment Links to "sell products or subscriptions," references Stripe docs, and provides CLI actions and a proxy to call Stripe endpoints (including POST/DELETE/PATCH via membrane request). Membrane handles authentication so the skill can run authenticated Stripe actions (create/update payment links, prices, products). This is not a generic browser or HTTP tool: its primary purpose is to perform payment-related operations via a payment gateway. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata