dodo-best-practices
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an integration guide for "Dodo Payments" and explicitly exposes payment gateway APIs and SDK calls. It includes API key handling, live/test environments, and concrete code examples that create checkout sessions (client.checkoutSessions.create), manage subscriptions, handle webhook events like payment.succeeded and refund.succeeded, and create customer portal sessions (client.customers.createPortalSession). These are specific, purpose-built financial operations (collecting payments, subscriptions, refunds, and customer billing flows), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata