didit-sdk-integration

Warn

Audited by Snyk on Oct 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill integrates verification sessions, transaction monitoring, and authentication SDKs. It mentions top-up functionality via POST /v3/billing/top-up/ to get Stripe checkout links (SKILL.md:66). This constitutes a direct financial operation (funding/debiting an account or instructing a payment). However, this route relies on API keys (DIDIT_API_KEY) and administrative backend controls for authentication/authorization. Therefore, it is a direct operation with qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 10:21 AM
Issues
1