agent-production-validator

Warn

Audited by Snyk on Mar 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes integration tests for a payment gateway: it constructs a PaymentService with process.env.STRIPE_TEST_KEY and baseUrl pointing to the Stripe API and calls createPaymentIntent (checking for pi_... and payment status). This is a specific, concrete payment API integration (Stripe) capable of creating payment transactions — matching the Payment Gateways criterion for Direct Financial Execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 1, 2026, 04:33 PM