ai-integrated-api-backend

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly implements session-based billing and wallet manipulation as part of its core flow. The documentation describes "Session & Billing: Per-message charging, wallet deduction, price locking" in the objective, the request flow includes a Billing step that "Check Wallet Balance" and "Deduct Amount", and an example shows calling deduct_from_wallet(user, session.per_message_price). These are explicit financial actions (deducting funds / logging transactions) rather than generic API or automation capabilities, so the skill grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 03:08 AM