cawcut-ad-video

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct financial/credit action via image run and video run commands, which consume credits and require a confirmation token obtained from image quote and video quote (SKILL.md:136, SKILL.md:144, SKILL.md:286-287). Although the skill prompts the user to confirm via an interface tool (AskUserQuestion), this client-side prompt and token requirement rely on agent compliance and local execution rather than an independent server-enforced authentication/authorization check specifically validating the financial execution route at the execution layer.