magento-graphql

Warn

Audited by Snyk on Sep 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documents how to query and interact with Magento's GraphQL API for e-commerce storefront development, including creating carts, managing customer accounts, adding products to carts, and executing the placeOrder mutation to complete purchases. Although it uses standard HTTP POST requests via GraphQL (which can be viewed as generic API callers), the explicit definition and documentation cover e-commerce checkout and order placement (placeOrder), qualifying as direct financial/checkout execution under platform integrations.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 16, 2026, 11:00 AM
Issues
1