agent-web-identity

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill specifically enables an agent to obtain a time-limited delegation for an Internet Identity and to sign canister calls as the user's app-specific principal (via icp identity link web and icp canister call --identity). The documentation explicitly states the delegation "grants full authority as the user's app principal" and warns about state-changing canister calls. This is an explicit blockchain/crypto signing authority (not generic automation) and therefore provides direct financial execution capability via on‑chain canister transactions.