linkpix-grok-sales

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a CLI tool (qhkit) to generate e-commerce promotional videos via an AI service ("青虎AI"), which involves checking estimates and deducting credits (estimate, generate), constituting a direct financial/consumption operation (charges/credits). However, the execution depends entirely on user CLI authentication (qhkit config set --token <密钥>) and account credentials managed by the external CLI/service layer, satisfying independent service-layer authentication for API access. Therefore, it is a direct operation with qualifying independent access control.