rails-service-object
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements payment processing: the Orders::CreateService lists "payment_gateway: Processes payment" in dependencies and "Charges payment method" under side effects. The implementation calls payment_gateway.charge(amount: ..., payment_method_id: ...), and the repository layout includes payments/charge_service.rb and refund_service.rb. These are specific payment gateway operations (charging/refunding), which constitute direct financial execution authority.
Audit Metadata