bc-api-rest
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. The skill explicitly documents BigCommerce REST endpoints and scopes that enable creating and modifying orders, checkouts, and payment processing (e.g., /v2/orders with POST/PUT, /v3/checkouts, and /v3/payments). It also describes authentication scopes (store_cart, store_checkout, store_v2_orders, etc.) that grant the API authority to perform checkout/payment-related actions. These are specific,e-commerce payment and order APIs (not generic HTTP or browser tools) capable of moving money or triggering payment flows, so it meets the definition of direct financial execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata