credit-based-billing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests webhook payloads (such as credit and low-balance events) which contain external customer and event data, presenting an indirect prompt injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents instructions and SDK code for creating checkout sessions (client.checkoutSessions.create(...)) to purchase credit top-up products and subscriptions (direct financial transactions/purchases), and for managing credit grants, balances, and ledger entries via Dodo Payments API. The execution layer authenticates via API bearer tokens (bearerToken: process.env['DODO_PAYMENTS_API_KEY']), establishing independent service-level authentication control for these direct operations.