shopify

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents direct use of the Shopify Admin GraphQL API with admin scopes such as write_orders and explicitly references money-related mutations (e.g., refundCreate, orderCancel, transactions) and the ability to "charge refunds" and otherwise mutate orders. Those capabilities allow the agent to initiate refunds and other real financial actions in a store, so it provides explicit financial execution authority (not just a generic HTTP or browser tool).