spree-payments

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational payment features in Spree, including processing payments, gateway integrations (Stripe, Adyen, PayPal), and creating refunds (payment.refunds.create!). Because these workflows involve direct financial charges and refunds within an application framework without documenting an independent service-enforced access check for the execution routes described, it presents a high financial exposure.