laravel-constants-and-configuration

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes payment-specific configuration and code for processing payments: a config/payment.php with a 'stripe' section (STRIPE_KEY, STRIPE_SECRET, webhook settings, currency, minimum_amount and payment statuses), a PaymentService::charge method that enforces minimum amounts and is intended to "Process payment", and a ProcessPayment job. These are specific payment-gateway related elements (Stripe) and are explicitly designed for financial operations rather than being generic tooling, so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:18 AM