discounts-and-promotions
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides guidance and code examples for implementing discount codes, checkout sessions, and subscription plan changes using the Dodo Payments SDK and API. Creating checkout sessions or changing subscription plans generates payment sessions and adjusts billing amounts, constituting direct financial operations (charges/purchases/subscription adjustments). Authentication is handled via the DodoPayments SDK using API keys (e.g., process.env.DODO_PAYMENTS_API_KEY), relying on the service-level API credential check for access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata