spree-b2b
Warn
Audited by Snyk on Oct 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents B2B commerce configuration, catalogs, wholesale pricing, PO numbers, and orders on account (such as pay by invoice or staff-keyed draft orders using payment_pending or recording payments). These constitute indirect financial and billing operations (creating invoices, draft orders, and recording payment states) rather than direct payment transfers or charges executed by the skill itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata