product-catalog-management

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill manages product catalogs, pricing, collections, and creates checkout sessions via client.checkoutSessions.create({ product_collection_id: collection.id, ... }). Creating a checkout session initializes a payment flow for downstream execution, constituting a direct financial operation (purchase authorization/charging workflow). Authentication relies on API credentials (bearerToken: process.env.DODO_PAYMENTS_API_KEY), but this is client-side code configuration rather than an independent access control mechanism enforced on the payment route itself.