ce-cart-checkout
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for checkout and payment processing. It includes built-in "payment gateway integration", SDK calls to create orders (sdk.order.createOrder) with payment_method, instructions to "Process payment" using payment_info from the order response, and polling payment status (sdk.order.getPaymentStatus). These are specific, purpose-built payment APIs for moving money/processing transactions (hosted checkout, token sync, PCI-compliant flows), so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata