hotmart-api

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents integration with the Hotmart API (v1), which includes handling sales refunds and payment/installment negotiations (SKILL.md:97-110). These are direct and indirect financial operations. However, authentication to the API is explicitly enforced via OAuth 2.0 Client Credentials and token generation (SKILL.md:24-27), providing independent server-side access control for all API routes. Therefore, the financial exposure is medium.