payment-idempotency
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about payment processing: it defines Create Payment, Cancel, Capture, and Refund handlers, enforces idempotency keys (paymentId, requestId), and shows direct calls to an acquirer (acquirer.authorize/process/cancel). Its primary purpose is to manage and control financial transactions with payment gateways/acquirers, preventing duplicate charges and handling refunds/cancellations. This is a specific financial-execution capability (payment gateway / transaction operations).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata