agent-guardrails

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references financial actions: it notes agents may have tools that "touch ... money" and the example tool-gate lists a "refund" tool (HITL_REQUIRED = {"refund", "delete_user"}). "refund" is a specific financial operation (moving funds back to a user), so the skill includes a tool explicitly designed for financial execution (even if human approval is required). Therefore it grants direct financial execution capability.