iblai-vibe-agent-billing

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill exposes explicit REST endpoints and client mutations to create/update/delete spend caps (budget limits) including the upsert/PUT operations that set max_cost_usd and enforcement. These are programmatic APIs and SDK hooks (e.g., useUpsertAgentSpendCapMutation, PUT agents/{mentor_unique_id}/spend-cap/, per-user PUT) that let an agent modify spending limits/budgets — i.e., manage financial/budget settings. Per the rules, programmatic budget updates are considered Direct Financial Execution capability.