happyhorse

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates video generation tools (happyhorse_generate_video, happyhorse_generate_video_from_image, etc.) that are explicitly paid through Ace Credits. This constitutes a direct financial operation (purchases/service charges). While authentication uses an Ace Data Cloud API token configured via plugin options, no independent service-enforced verification or control mechanism is documented for the payment route itself within the skill definition (relying instead on agent-level instructions and configuration), placing it in the high severity tier.