NYC

stripe-best-practices

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about integrating with Stripe — a payment gateway — and references concrete Stripe APIs and operations that create and manage payments and fund flows (CheckoutSessions, PaymentIntents, SetupIntents, Invoicing, Payment Links, Billing/Subscriptions, and Stripe Connect with direct/destination charges and on_behalf_of). These are specific financial execution interfaces (creating charges, payment intents, subscriptions, and controlling fund routing), not generic tooling, so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 02:56 AM