payment-development
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payments development guide for the @rytass/payments package and defines concrete payment interfaces and operations. It specifies a PaymentGateway interface (prepare(), query()), Order methods (commit(), refund()), BindCardPaymentGateway (prepareBindCard(), checkoutWithBoundCard()), and channel-specific commit messages (credit card, virtual account, WebATM, CVS, Apple Pay, LINE Pay). It targets creating adapters for real payment providers (台灣金流服務提供商) and includes types for payment auth info, virtual account details, and refund processing. These are specific tools/APIs for executing and managing financial transactions (payment gateways, card binding/checkout, refunds), not generic utilities—so it grants direct financial execution capability.
Audit Metadata