postedly-send-postcard

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill orchestrates postcard purchases by generating quotes and providing Stripe Checkout URLs for user payment authorization on a hosted web page. This constitutes a direct financial operation (purchase/charge) backed by independent access control (hosted checkout session requiring user authentication/approval on the external service page). Therefore, it qualifies as medium severity.