sikaru-setup

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational procedures for the Sikaru CLI, which includes adding credits and funding API usage through sikaru credits add (a direct payment/top-up operation). This direct financial operation is protected by user confirmation rules and authentication via the Sikaru CLI/API keys, but the tool-level execution relies on explicit user approval or payment via wallet/URL rather than an independent service-enforced server-side auth check specifically gating the payment transaction itself apart from standard API token authentication. Since it constitutes a direct financial operation without qualifying independent access control on the payment action, it falls under high severity.