saga-orchestration
Warn
Audited by Snyk on Mar 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill's templates explicitly include payment-processing steps and compensation for payments (e.g., an OrderFulfillmentSaga with a "process_payment" step referencing "PaymentService.ProcessPayment" and "PaymentService.RefundPayment", and choreography handlers that publish "ProcessPayment", "RefundPayment", "PaymentProcessed", "PaymentFailed" events). These are specific, domain-level functions to initiate and roll back monetary transactions rather than generic actions, so the skill provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata