alpha-scene-gen

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill orchestrates 3D asset generation through an external MCP connector (Alpha3D, Tripo, or Meshy) which spends real platform credits per generated asset, constituting an in-scope direct financial operation (purchasing/charging for generation jobs). However, the skill explicitly enforces human-in-the-loop confirmation before submitting any paid job (SKILL.md:25-26, 192-212), and the provider service layer independently authenticates and authorizes API access (SKILL.md:23). Thus, qualifying independent access control is present.