better-auth-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text from incoming HTTP requests at its runtime endpoints—especially POST /dodopayments/webhooks which “reads the raw request” and passes the payload into onPayload after signature verification—meaning external request bodies are LLM-visible.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a dedicated payment integration with Dodo Payments. It explicitly instantiates a DodoPayments client with a bearer API key, exposes server functions and endpoints for creating checkout sessions, creating/synchronizing customers, listing payments/subscriptions, and ingesting metered usage — all actions tied to payment processing and billing. These are specific financial execution capabilities (payment gateway operations), not generic tooling.