generate2dmedia

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a media generation layer (route_media.py, generate_media.py) that makes paid API calls to various providers (OpenAI, Google Gemini, xAI, BytePlus ModelArk, fal.ai) using configured API keys as the owner's consent. This constitutes a direct financial operation (purchases/API charges) without documented independent service-layer authentication/authorization checks on the skill's execution routes.