mira-generate

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an MCP server that generates images, videos, 3D models, and audio by spending credits via various tools (generate_image, generate_video, generate_3d, upscale_video, etc.). These operations consume platform credits, which constitutes an in-scope financial operation (service resource consumption/billing). Authentication is handled via OAuth ("It signs in with the user's Mira account through OAuth on the first call that spends credits", SKILL.md:25-28), establishing qualifying independent access control for these direct operations.