pci-compliance
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes payment gateway code and examples that perform payments: e.g., use of the Stripe SDK with stripe.api_key = "sk_..." and stripe.Charge.create(...) in charge_with_token, plus storing payment method tokens via Stripe. Although the skill is focused on PCI compliance, it contains concrete, specific APIs and functions for creating charges and managing payment-method tokens (i.e., sending transactions). This qualifies as direct financial execution capability.
Audit Metadata