coinbase-openapi-skill

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates Coinbase Advanced Trade REST APIs to execute direct financial operations (trades/swaps/purchases via order creation post:/api/v3/brokerage/orders). Although API credentials and ES256 JWT signing (jwt_bearer_v1) are configured via uxc, this service authentication does not constitute qualifying independent access control or external user authorization for order placement. Therefore, it falls under direct financial operations without established qualifying control.