woocommerce-wp-cli
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a focused WooCommerce WP-CLI reference that explicitly includes commands and examples for configuring payment gateways and payment credentials (e.g., wp wc payment_gateway update, wp option update woocommerce_stripe_settings --format=json, "Payment credentials not in Blueprints | Set via wp option update woocommerce__settings"), creating REST API keys with read_write permissions, and order/refund management (wp wc shop_order_refund, shop_order). These are specific, finance-related operations (payment gateway configuration, API keys for read/write access, and refunds) rather than generic tooling, and therefore constitute direct financial execution capability.
Audit Metadata