amazon-payment-services
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payment-gateway integration for Amazon Payment Services. It includes production and sandbox API endpoints, required credentials (access_code, merchant_identifier, SHA phrases), and concrete commands/payloads that perform money-moving operations: PURCHASE, AUTHORIZATION, CAPTURE, REFUND, tokenization/save-card flows, recurring payments, and payment links. Because its primary and explicit definition is to accept/process/refund payments (i.e., send transaction operations), it grants direct financial execution capability.
Audit Metadata