payment-idempotency

Warn

Audited by Snyk on Apr 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about payment connector behavior: creating payments, authorizing with an acquirer, initiating async payments (Pix/Boleto), cancelling, capturing, and refunding. It describes calling acquirer.authorize/process/cancel, handling paymentId/requestId idempotency to prevent duplicate charges, and storing/returning acquirer responses. These are specific, purpose-built financial operations and APIs to move money (create charges, cancel/refund), so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 6, 2026, 07:41 PM
Issues
1