spree-order-totals
Warn
Audited by Snyk on Oct 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents order totals, typed money rows, recalculation workflows, and administrative endpoints for Spree 6 cart/order management. It explains calculation formulas, custom adjusters, and backend service calls for discounts and fees. This represents indirect financial operations (building/calculating totals and invoicing/billing structures). As an indirect financial operation, independent access control is not required for evaluation.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata