gps-auth

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is for Google Play Developer API access and explicitly lists "refund" as a write operation (requires --confirm). With service account credentials and the Play Developer API enabled, the tool can perform refund actions (i.e., issue refunds for purchases), which is a direct financial transaction capability.