royalti-api
Warn
Audited by Snyk on Feb 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The Royalti API docs include explicit payment and transaction endpoints and workflows that perform money-moving actions: e.g., POST /payment/ (and /payment/bulk) to create payments, payment-request endpoints with POST /payment-request/{id}/approve and /decline, accounting/transactions endpoints (GET /accounting/transactions), transaction models (type payment, status pending|processed|failed), and payment-related webhooks (PAYMENT_COMPLETED, PAYMENT_REQUEST_APPROVED, etc.). These are specific, built-in API methods to create/approve/process payments (i.e., send transactions), not generic tooling. Therefore the skill provides direct financial execution capability.
Audit Metadata