effect-client-wrapper

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes a concrete Stripe integration: it loads STRIPE_SECRET_KEY, instantiates the Stripe SDK, exposes a use(fn => client...) wrapper, and shows calling client.customers.create. Stripe is a payment gateway API, so this skill provides a specific tool/API for financial operations (direct interaction with a payments SDK). Although the pattern is generic, the included Stripe example (and mention of Stripe in the description) constitutes explicit financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:15 PM