ordercli

Warn

Audited by Snyk on Jul 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill provides explicit order-placement commands (reorder with --confirm) and account login/session commands for Foodora/Deliveroo. The "reorder ... --confirm" action is specifically designed to add items to a cart and confirm the purchase, which directly executes ecommerce transactions tied to a user's account/payment method. This grants the agent authority to initiate financial transactions (place orders/charges).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 13, 2026, 02:10 PM
Issues
1
Security Audit — snyk — ordercli