add-payments

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes — the skill is explicitly designed to integrate a payment gateway (Polar) into an app. It includes installing the @polar-sh/sdk, creating checkouts via polar.checkouts.custom.create, handling payment webhooks (validateEvent with POLAR_WEBHOOK_SECRET) and processing subscription events (subscription.active/canceled) to mark purchases and grant/revoke access. It also requires API credentials (POLAR_ACCESS_TOKEN, POLAR_PRODUCT_ID) and instructs webhook configuration. These are specific, non-generic financial operations (payment gateway and subscription management), so it grants Direct Financial Execution authority.