bc-api-rest

Warn

Audited by Snyk on Mar 31, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill explicitly documents BigCommerce REST endpoints and scopes that enable creating and modifying orders, checkouts, and payment processing (e.g., /v2/orders with POST/PUT, /v3/checkouts, and /v3/payments). It also describes authentication scopes (store_cart, store_checkout, store_v2_orders, etc.) that grant the API authority to perform checkout/payment-related actions. These are specific,e-commerce payment and order APIs (not generic HTTP or browser tools) capable of moving money or triggering payment flows, so it meets the definition of direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 31, 2026, 06:10 AM
Issues
1