linkpix

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational commands using the @iqinghu/qhkit CLI to generate, process, and edit AI images, videos, ads, POD merchandise, and workflows. These actions consume platform credits and initiate direct generation, editing, and task submission requests. Although the tool interacts with the Qinghu AI media platform via API keys configured in the environment or set via qhkit config set --token, there is no documented, service-enforced independent access control or authorization check performed by the execution layer itself to validate the payment or credit consumption beyond API key authentication for the underlying service. Therefore, it is a direct financial/credit-consuming operation without an established independent access control mechanism at the route level.