payments
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payments integration: it references the Stripe SDK and secret keys and provides concrete code that creates Checkout Sessions, initiates payments/subscriptions (stripe.checkout.sessions.create with mode "payment" or "subscription"), creates billing portal sessions, handles webhooks for payment events, and confirms payments (stripe.confirmPayment). Those are specific APIs to process transactions and manage billing — i.e., directly move/process money. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata