teller
Warn
Audited by Snyk on Apr 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an explicit integration for "Teller" (a financial/banking API) and exposes domain-specific financial objects (Account, Transaction, Budget, Goal). It documents how to run Membrane actions and — critically — how to proxy arbitrary requests to the Teller API (membrane request CONNECTION_ID /path/to/endpoint) with HTTP methods including POST, PUT, DELETE. Membrane also handles authentication/credential refresh, enabling the agent to perform authenticated write operations (create/update/delete transactions, budgets, etc.) without asking the user for keys. Because this is a purpose-built banking/financial API integration (not a generic HTTP or browser tool) and it permits authenticated state-changing requests, it constitutes Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata