purchasely-debug
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly focused on in-app purchase and subscription flows and includes specific, finance-related APIs and actions. The doc references programmatic purchase APIs (e.g., purchase(planId), purchase({ planId })), store purchase handling (App Store / Play Store), observer vs. full running modes that control whether the SDK processes purchases, and required calls after purchases (Purchasely.synchronize()). It also mentions Stripe and cross-platform subscriptions (App Store + Stripe, Play Store + Stripe), promo/offers and receipt validation — all of which are concrete payment/subscription operations rather than generic tooling. This is a purpose-built payment/subscription integration debugger (i.e., a tool whose primary function is to initiate/handle/validate monetary transactions), so it grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata