bigcommerce-api
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly documents BigCommerce's Payments API and transaction-related endpoints: it references "payments-api
- Payment processing, gateways, checkout", provides a Payments base URL (https://payments.bigcommerce.com/stores/{store_hash}/payments), calls out V3 support for "transactions/refunds", and lists rate limits for the Payments API. These are specific, purpose-built APIs to process payments and manage transactions/refunds (i.e., move money), not generic HTTP or browser tooling. Therefore it grants direct financial execution capability.
Audit Metadata