magento-graphql
Warn
Audited by Snyk on Sep 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documents how to query and interact with Magento's GraphQL API for e-commerce storefront development, including creating carts, managing customer accounts, adding products to carts, and executing the
placeOrdermutation to complete purchases. Although it uses standard HTTP POST requests via GraphQL (which can be viewed as generic API callers), the explicit definition and documentation cover e-commerce checkout and order placement (placeOrder), qualifying as direct financial/checkout execution under platform integrations.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata