polar
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a CLI for managing SaaS billing/monetization on the Polar platform. It exposes commands to create products with prices, create subscriptions, create checkouts (checkout links), manage orders and customers, and ingest/query usage-based billing meters. Examples include "polar subscriptions create", "polar checkouts create --products ", "polar products create --prices '[{"amount":2999,...}]'", and "polar orders list --customer-id ". These are specific, purpose-built financial operations (creating charges/checkout sessions and managing subscriptions/orders) rather than generic tooling, and require an access token for authenticated API actions. Therefore it grants direct financial execution capability.
Audit Metadata