openrouter-cost-controls

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes API calls and management operations that set and manage dollar credit limits and balances: it shows POST /api/v1/keys with a dollar "limit" using a management key to provision scoped keys, reads and records credit balances and per-generation costs, and references topping up/auto-topup. These are specific, built-in financial controls for account credits (provisioning limits and bookkeeping), which constitute direct financial execution/management capabilities rather than generic tooling.