ordercli
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill provides explicit order-placement commands (reorder with --confirm) and account login/session commands for Foodora/Deliveroo. The "reorder ... --confirm" action is specifically designed to add items to a cart and confirm the purchase, which directly executes ecommerce transactions tied to a user's account/payment method. This grants the agent authority to initiate financial transactions (place orders/charges).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata