purchasely-debug

Warn

Audited by Snyk on Jul 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly focused on in-app purchase and subscription flows and includes specific, finance-related APIs and actions. The doc references programmatic purchase APIs (e.g., purchase(planId), purchase({ planId })), store purchase handling (App Store / Play Store), observer vs. full running modes that control whether the SDK processes purchases, and required calls after purchases (Purchasely.synchronize()). It also mentions Stripe and cross-platform subscriptions (App Store + Stripe, Play Store + Stripe), promo/offers and receipt validation — all of which are concrete payment/subscription operations rather than generic tooling. This is a purpose-built payment/subscription integration debugger (i.e., a tool whose primary function is to initiate/handle/validate monetary transactions), so it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 2, 2026, 08:21 AM
Issues
1
Security Audit — snyk — purchasely-debug