zoho-commerce

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill is an integration for Zoho Commerce, an e-commerce platform whose primary features include managing orders and "accept payments" and it explicitly lists "Payment Gateway" among its resources. The skill exposes Membrane actions to interact with Zoho Commerce (discoverable actions and runnable actions via action run), which can include operations on orders and payment gateways. Because it is specifically designed to manage commerce and payment functionality (i.e., move/accept money), it meets the "Payment Gateways" criterion for Direct Financial Execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 01:00 AM
Issues
1
Security Audit — snyk — zoho-commerce