domain-check

Warn

Audited by Snyk on Feb 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill includes explicit, specific functionality to purchase domains via Vercel. It documents the interactive CLI command npx vercel domains buy <domain> (requiring pty) and — critically — an API example that POSTS to the Vercel Registrar endpoint (POST https://api.vercel.com/v1/registrar/domains) using the user's VERCEL_TOKEN. Those are concrete, purpose-built actions that initiate purchases/charges (i.e., move money) rather than generic browser automation or generic HTTP calls. Therefore it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 26, 2026, 05:57 AM