pci-compliance
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly references and provides code and integration patterns for payment gateways and processor APIs (e.g., Stripe Elements, stripe.createToken, stripe.checkout.sessions.create, Braintree, Adyen, Square, tokenization, payment-intent patterns). Those are specific payment gateway integrations (APIs) used to process payments — i.e., tools explicitly tied to moving money — even though the document is framed as PCI compliance guidance. Therefore it contains explicit financial execution capability.
Audit Metadata