stripe-dev

Warn

Audited by Snyk on Feb 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed for payment and money-movement operations via Stripe. It references Stripe products and APIs for Payment Intents, Checkout, Billing (subscriptions/invoices), Connect (marketplace payouts), Treasury (financial accounts, money movement, issuing cards, crypto onramp), payouts, refunds, and disputes. It even includes SDK setup using a Stripe secret key and a concrete example calling stripe.paymentIntents.create with an amount. These are direct financial-execution capabilities (payment gateway and money-transfer APIs), not generic tooling.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 24, 2026, 06:33 AM