travelport
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly lists "Payment" as a core capability of the Travelport integration and documents how to run connector actions and proxy API requests through Membrane (including POST/PUT methods with injected auth). Membrane's action runner and proxy are presented as the mechanism to call Travelport endpoints (including payment-related endpoints), and Membrane handles credentials/authorization for those calls. This is not a generic browser or generic HTTP tool — it is a specific connector to a system that supports creating and managing payments for bookings, so it provides the ability to execute financial transactions within Travelport.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata