external-integration-patterns
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly focused on integrating payment and related services and includes concrete Stripe API usage (e.g., stripe.balance.retrieve(), stripe.subscriptions.list(), stripe.checkout.sessions.retrieve(), stripe.webhooks.constructEvent(), using STRIPE_SECRET_KEY for reconciliation). Stripe is a payment gateway; the skill is specifically designed to integrate and interact with that payment provider (health checks, reconciliation, verifying payments), which qualifies as direct financial execution capability under the rule that flags payment gateway integrations.
Audit Metadata