stripe-expert

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payments integration and contains concrete API calls that create and manage real financial transactions: stripe.checkout.sessions.create (one-time payments and subscriptions), stripe.paymentIntents.create, customer creation, webhook handling for invoice.payment_succeeded/failed, billing portal sessions, and Stripe Connect account creation with transfer_data and application_fee_amount. It uses secret keys and server-side APIs intended to charge cards, manage subscriptions, record payments, and transfer funds to connected accounts. This is a specific payment gateway integration (Stripe) whose primary purpose is to move money, so it qualifies as Direct Financial Execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 03:34 AM