shopify
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about building on the Shopify platform and references payment-specific capabilities: "billing API integration", "integrating payment processing", "checkout customizations" (checkout UI extensions), POS extensions, and "implementing discount/payment/shipping rules" and "Function (discounts, payment, delivery, validation)". These are platform-specific APIs and extension points that are explicitly designed to handle payments, billing, and checkout transactions rather than being generic tooling. Under the decision logic, this is a tool whose primary and explicit definitions include sending/handling payments and billing, so it constitutes Direct Financial Execution capability.
Audit Metadata