generate-image

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an image generation service via the OpenRouter Image API (POST /api/v1/images), which bills per request and incurs direct financial costs for paid API calls. This is a direct financial operation (purchasing/incurring charges for API calls). Access is controlled via an API key credential (OPENROUTER_API_KEY), which represents service API credentials validating access to the OpenRouter endpoint. Therefore, this falls under direct operation with qualifying independent access control.