payment-development

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a payments development guide for the @rytass/payments package and defines concrete payment interfaces and operations. It specifies a PaymentGateway interface (prepare(), query()), Order methods (commit(), refund()), BindCardPaymentGateway (prepareBindCard(), checkoutWithBoundCard()), and channel-specific commit messages (credit card, virtual account, WebATM, CVS, Apple Pay, LINE Pay). It targets creating adapters for real payment providers (台灣金流服務提供商) and includes types for payment auth info, virtual account details, and refund processing. These are specific tools/APIs for executing and managing financial transactions (payment gateways, card binding/checkout, refunds), not generic utilities—so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 02:25 AM