marketing-message-test

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill performs Salesforce Marketing Cloud message previews and test sends (e.g., send-test-email, send-test-sms, send-test-whatsapp, etc.). Test sends dispatch real messages across communication channels, constituting direct operational actions involving communication assets/services. However, the operations require authentication via the Salesforce CLI (sf api request rest) utilizing an org alias and bearer token, and access control is enforced at the platform level via Salesforce org permissions (accessCheck with type orgPerm and value MarketingEngagement in SKILL.md:7-9). Thus, qualifying independent access control is established, placing the operation in the medium severity tier.