laravel-backend-expert
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes payment gateway integration. It defines a PaymentService registered as a singleton using config('services.stripe.secret'), references payment-related operations (e.g., $this->paymentService->cancelSubscription($user->subscription)), and exempts routes like 'stripe/*' from CSRF validation (webhook handling). These are specific, explicit references to Stripe/payment processing rather than generic HTTP or storage tooling, so it enables direct financial execution capability.
Audit Metadata