payments-with-dodo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/webhooks.md, the required runtime path reads the raw webhook body via const payload = await req.text(); and then passes the outsider-supplied request text into dodo.webhooks.unwrap(payload, ...), making the free-text webhook payload an LLM-input-like exposure at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payments/billing integration ("Payments with Dodo") and prescribes implementing the full billing lifecycle: checkout/SDK integration, test/live API keys, webhooks, handling purchases, refunds, subscriptions, and storing provider customer/payment/subscription IDs and entitlements. These are specific payment gateway operations (processing purchases, managing subscriptions and refunds), not generic tooling, so it grants direct financial execution capability.