payment-idempotency
Warn
Audited by Snyk on Apr 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about payment connector behavior: creating payments, authorizing with an acquirer, initiating async payments (Pix/Boleto), cancelling, capturing, and refunding. It describes calling acquirer.authorize/process/cancel, handling paymentId/requestId idempotency to prevent duplicate charges, and storing/returning acquirer responses. These are specific, purpose-built financial operations and APIs to move money (create charges, cancel/refund), so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata