postedly-handwritten-card

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill offers a direct payment operation (purchasing a handwritten card via Stripe Checkout hosted by Postedly, initiated by generating a quote and checkout link). Independent service-level access control is established via OAuth connection and API authentication ("client's normal OAuth connection", "connected account's verified email"). Therefore, the direct financial operation has qualifying independent access control, resulting in a medium severity rating.