Sapecc

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes SAP FI/CO transaction codes and payment functions (e.g., G/L posting FB50/FB01, Vendor Invoice FB60, Customer Invoice FB70, and Payment—Automatic payment F110). These are specific, built-in SAP transactions used to create financial documents and execute payments within an ERP (i.e., to move money). This is not a generic tool description (browser or generic API caller) but concrete financial execution functionality, so it meets the "Direct Financial Execution" criterion.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 10:15 PM