ce-orders

Warn

Audited by Snyk on Mar 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes payment-related APIs and integrations: createOrder accepts a payment_method with a payment_provider_slug (e.g., "juspay"), gateway_reference_id, and action for payment flows; it provides getPaymentStatus, retryOrderPayment, and cancelOrder with a refund_mode (ability to issue refunds). These are concrete, commerce-specific operations that initiate payments and refunds via payment gateways — i.e., direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 14, 2026, 03:41 PM
Issues
1