spree-headless-storefront

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and cloning the live storefront repo at runtime (e.g., https://github.com/spree/storefront and the git clone https://github.com/spree/storefront command), which loads external documentation/code that can directly control agent instructions and may be executed locally (npm install / npm run dev).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly an e-commerce storefront that integrates specific payment gateways and checkout behavior. It references Stripe (Stripe Elements / Apple Pay / Google Pay / Link), Klarna, Affirm, SEPA, a publishable key (NEXT_PUBLIC_SPREE_PUBLISHABLE_KEY=pk_...), and a checkout flow that includes selecting payment methods and placing orders. These are concrete, payment-specific integrations (Payment Gateways) and thus enable direct financial execution capabilities.