woo-checkout
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is specifically about customizing the WooCommerce checkout flow including order creation and payment processing. It explicitly references WC_Payment_Gateway::process_payment(), adding fees (WC()->cart->add_fee), and Store API endpoints that "process during checkout" and "process payment" in the order processing sequence. These are purpose-built hooks/APIs for executing payments and altering monetary transactions in an ecommerce context, not generic automation. Under the decision logic ("Is this tool's primary and explicit definition to move money?"), this skill is explicitly designed to move/handle money via payment gateway processing and order payment workflows.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata