pci-compliance

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly references and provides code and integration patterns for payment gateways and processor APIs (e.g., Stripe Elements, stripe.createToken, stripe.checkout.sessions.create, Braintree, Adyen, Square, tokenization, payment-intent patterns). Those are specific payment gateway integrations (APIs) used to process payments — i.e., tools explicitly tied to moving money — even though the document is framed as PCI compliance guidance. Therefore it contains explicit financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 12:19 PM