amazon-payment-services

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a payment-gateway integration for Amazon Payment Services. It includes production and sandbox API endpoints, required credentials (access_code, merchant_identifier, SHA phrases), and concrete commands/payloads that perform money-moving operations: PURCHASE, AUTHORIZATION, CAPTURE, REFUND, tokenization/save-card flows, recurring payments, and payment links. Because its primary and explicit definition is to accept/process/refund payments (i.e., send transaction operations), it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 11:00 PM