openai-apps-sdk
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The SDK exposes a ChatGPT-only API requestCheckout(session) (line 28) and a Checkout section (lines 232–244) describing an embedded payment sheet requiring session line items, currency in minor units, payment-provider/merchant metadata, and server-side token verification/completion. This is a specific payment/checkout integration (direct financial execution capability).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata