domain-check
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes explicit, specific functionality to purchase domains via Vercel. It documents the interactive CLI command
npx vercel domains buy <domain>(requiring pty) and — critically — an API example that POSTS to the Vercel Registrar endpoint (POST https://api.vercel.com/v1/registrar/domains) using the user's VERCEL_TOKEN. Those are concrete, purpose-built actions that initiate purchases/charges (i.e., move money) rather than generic browser automation or generic HTTP calls. Therefore it grants direct financial execution capability.
Audit Metadata