stripe-treasury
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. This skill is explicitly built to interact with Stripe Treasury — a banking/payment product — and exposes domain-specific actions like OutboundPayment, OutboundTransfer, FinancialAccount and Transaction. The skill documents running Membrane actions (membrane action run ...) and proxying arbitrary requests to the Stripe Treasury API (POST/PUT/DELETE) which can perform transfers and payments. This is not a generic tool: it is specifically designed to execute financial transactions via a payment/banking API and manages credentials for that purpose.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata