bitflow-hodlmm-zest-yield-loop

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a composed write controller that moves on-chain assets between HODLMM and Zest. It requires a wallet address, runs mainnet write legs (deposit/withdraw/move liquidity), demands explicit --confirm=ROUTE for run/resume, requires every delegated write leg to return a txid, and verifies tx_status=success on Hiro before marking legs confirmed. The documentation repeatedly states "This is a composed write skill and can move funds" and describes broadcasted transactions and checkpointed recovery. These are concrete blockchain transaction capabilities (wallet signing/tx broadcasting/tx verification), not generic tooling.