didit-sdk-integration
Warn
Audited by Snyk on Oct 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill integrates verification sessions, transaction monitoring, and authentication SDKs. It mentions top-up functionality via POST /v3/billing/top-up/ to get Stripe checkout links (SKILL.md:66). This constitutes a direct financial operation (funding/debiting an account or instructing a payment). However, this route relies on API keys (DIDIT_API_KEY) and administrative backend controls for authentication/authorization. Therefore, it is a direct operation with qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata