spree-pricing
Warn
Audited by Snyk on Oct 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents pricing configurations, product variant prices, price lists, B2B wholesale pricing, bulk price updates, and price rules for the Spree 6 e-commerce framework. It explains how to set base prices and create price lists via API calls (
admin.prices.create,admin.priceLists.create). This constitutes pricing data configuration and management rather than executing direct financial transactions, billing customers, or processing payments itself (which falls under indirect financial information / configuration). Therefore, it qualifies as an indirect financial operation.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata