mobile-checkout

Warn

Audited by Snyk on Oct 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents implementing mobile in-app checkout flows using Dodo Payments, which includes creating checkout sessions via backend API calls (client.checkoutSessions.create) and starting payment collection via mobile SDKs. This constitutes a direct payment/charge operation. The backend creation endpoint uses requireAuth, establishing an authenticated session/business access control check.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 11, 2026, 09:36 AM
Issues
1