pci-compliance

Warn

Audited by Snyk on Mar 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes payment gateway code and examples that perform payments: e.g., use of the Stripe SDK with stripe.api_key = "sk_..." and stripe.Charge.create(...) in charge_with_token, plus storing payment method tokens via Stripe. Although the skill is focused on PCI compliance, it contains concrete, specific APIs and functions for creating charges and managing payment-method tokens (i.e., sending transactions). This qualifies as direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 7, 2026, 05:10 PM