django-patterns
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes explicit payment-processing code: a ProductViewSet.purchase action, an OrderService.process_payment method that calls PaymentGateway.charge(amount=..., token=...), and order/payment status changes. Those are explicit hooks to charge payment tokens and mark orders as paid — i.e., functionality intended to execute financial transactions (move money). Even though a concrete provider name isn't given, this is not a generic API caller or browser automation; it is explicitly designed to process payments. Therefore it grants Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata