gift-cards
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about creating, issuing, redeeming, and refunding gift-card/store-credit balances. It includes direct programmatic operations that change monetary state: a Shopify Admin API endpoint to bulk-create gift cards (POST /admin/api/.../gift_cards.json), instructions for refunding to gift cards, and concrete code (getBalance and redeemGiftCard) that calculates balances, locks rows, and inserts ledger rows to debit/credit balances. These are specific financial execution actions (issuing value, applying value to orders, and creating refunds/store-credit), not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata