ksef-nextjs

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a purpose-built integration for Poland's KSeF e-invoicing API: it includes explicit operations to authenticate (mint/redeem KSeF tokens), open sessions, send encrypted FA(3) invoice XML, poll status, and persist KSeF numbers/UPOs. Runnable scripts referenced (e.g., send-invoice-online.ts) and environment vars for credentials show the skill is designed to submit invoices directly to a government financial system — an explicit financial execution capability (issuing/sending invoices), not a generic tool.