stripe-dev
Warn
Audited by Snyk on Feb 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed for payment and money-movement operations via Stripe. It references Stripe products and APIs for Payment Intents, Checkout, Billing (subscriptions/invoices), Connect (marketplace payouts), Treasury (financial accounts, money movement, issuing cards, crypto onramp), payouts, refunds, and disputes. It even includes SDK setup using a Stripe secret key and a concrete example calling stripe.paymentIntents.create with an amount. These are direct financial-execution capabilities (payment gateway and money-transfer APIs), not generic tooling.
Audit Metadata