woocommerce-wp-cli

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a focused WooCommerce WP-CLI reference that explicitly includes commands and examples for configuring payment gateways and payment credentials (e.g., wp wc payment_gateway update, wp option update woocommerce_stripe_settings --format=json, "Payment credentials not in Blueprints | Set via wp option update woocommerce__settings"), creating REST API keys with read_write permissions, and order/refund management (wp wc shop_order_refund, shop_order). These are specific, finance-related operations (payment gateway configuration, API keys for read/write access, and refunds) rather than generic tooling, and therefore constitute direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 10:08 PM