ce-orders
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes payment-related APIs and integrations: createOrder accepts a payment_method with a payment_provider_slug (e.g., "juspay"), gateway_reference_id, and action for payment flows; it provides getPaymentStatus, retryOrderPayment, and cancelOrder with a refund_mode (ability to issue refunds). These are concrete, commerce-specific operations that initiate payments and refunds via payment gateways — i.e., direct financial execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata