doordash-spend-guard

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a spend-control wrapper around DoorDash's CLI (dd-cli). It routes add-items and checkout operations through an audited script (dd-guard.sh), denies raw dd-cli checkout/cart calls via a hook, logs ledger intents and enforces per-order/daily/weekly/monthly caps. Those behaviors directly govern/order checkout actions and the payment flow for DoorDash orders (i.e., moving money or initiating purchases), so this is a specific financial-execution integration, not a generic tool.