payment-idempotency

Warn

Audited by Snyk on Apr 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about payment processing: it defines Create Payment, Cancel, Capture, and Refund handlers, enforces idempotency keys (paymentId, requestId), and shows direct calls to an acquirer (acquirer.authorize/process/cancel). Its primary purpose is to manage and control financial transactions with payment gateways/acquirers, preventing duplicate charges and handling refunds/cancellations. This is a specific financial-execution capability (payment gateway / transaction operations).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 1, 2026, 02:51 PM
Issues
1