credit-based-billing
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly a payments/billing integration (Dodo Payments) and contains direct financial execution APIs: creating checkout sessions, defining fiat credit entitlements, setting price_per_unit and overage billing, creating ledger entries (credit/debit) via balances.createLedgerEntry, and endpoints for billing-related operations (POST /credit-entitlements, create ledger entries, checkoutSessions.create, usageEvents.ingest that trigger chargeable deductions). Those operations are specifically intended to move value, bill customers, adjust balances, and charge overages — not generic tooling — so it grants direct financial execution authority.
Audit Metadata