agentsecrets

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides authenticated API call functionality and examples targeting a payment gateway (e.g., "agentsecrets call --url https://api.stripe.com/v1/balance --bearer STRIPE_KEY") and can inject secrets into environment-wrapped tools (e.g., "agentsecrets env -- stripe mcp"). Those are specific, concrete interfaces to payment APIs/CLIs, enabling direct execution of financial operations when credentials permit. This meets the criteria for Direct Financial Execution.