pci-compliance
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly payment-focused (PCI DSS / payment processing) and includes concrete, actionable code calling a payment gateway: e.g., stripe.api_key and stripe.Charge.create in TokenizedPayment. It also references using Stripe Checkout and PayPal. These are specific payment gateway integrations capable of sending transactions (charging tokens). Therefore it provides direct financial execution capability.
Audit Metadata