discounts-and-promotions

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill provides guidance and code examples for implementing discount codes, checkout sessions, and subscription plan changes using the Dodo Payments SDK and API. Creating checkout sessions or changing subscription plans generates payment sessions and adjusts billing amounts, constituting direct financial operations (charges/purchases/subscription adjustments). Authentication is handled via the DodoPayments SDK using API keys (e.g., process.env.DODO_PAYMENTS_API_KEY), relying on the service-level API credential check for access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 12:31 PM
Issues
1