saga-orchestration

Warn

Audited by Snyk on Mar 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill's templates explicitly include payment-processing steps and compensation for payments (e.g., an OrderFulfillmentSaga with a "process_payment" step referencing "PaymentService.ProcessPayment" and "PaymentService.RefundPayment", and choreography handlers that publish "ProcessPayment", "RefundPayment", "PaymentProcessed", "PaymentFailed" events). These are specific, domain-level functions to initiate and roll back monetary transactions rather than generic actions, so the skill provides direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 27, 2026, 07:01 AM
Issues
1