stripe-stack
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payments integration: it provides a Stripe client factory using STRIPE_SECRET_KEY, environment variables for sk_test_/sk_live_ and webhook secrets, webhook handler code that constructs and processes Stripe events (e.g., checkout.session.completed, customer.subscription.*), templates for plans/prices, and workflows for subscriptions, credits, and checkout. These are specific payment gateway APIs/patterns for creating and handling charges/subscriptions — not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata