phantom

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill instructs building Solana frontend applications that handle crypto payments, token transfers, swaps, and NFT minting using the Phantom Connect SDK and Helius Sender. These workflows involve direct financial transactions (e.g., transfers of SOL or USDC, crypto payments, and token swaps).

Regarding access control: transaction execution and signing rely on the Phantom wallet extension or embedded wallets where each transaction requires explicit user approval ("NEVER auto-approve transactions — each must be explicitly approved by the user", line 268). This user-interactive wallet signing mechanism provides independent execution-layer access control over the financial route. Therefore, it qualifies as a direct financial operation with independent access control.