saleor-storefront

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching live documentation at runtime (e.g., https://docs.saleor.io/docs/developer/storefront) to drive implementation instructions, so the external content would directly control the agent's prompts/behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly defines checkout-related GraphQL mutations and a payment step that initialize and complete transactions. It lists operations such as checkoutCreate, transactionInitialize (or "gateway-specific"), and checkoutComplete as part of the checkout flow — i.e., API calls whose purpose is to process payments and finalize orders. These are specific, payment-related endpoints (not generic browser automation or generic HTTP callers) intended to send/authorize/complete financial transactions through a payment gateway integration, so the skill grants direct financial execution capability.