discounts-and-promotions
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to manage payment-related features in the Dodo Payments system. The documentation includes SDK/API calls that create, update, delete discounts, create checkout sessions (client.checkoutSessions.create), attach customers via an authenticated POST (Authorization: Bearer ...), and change subscription plans (client.subscriptions.changePlan). These are specific payment-gateway operations (manipulating discounts and checkout/subscription behavior) and therefore grant direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata