jev-computer-use

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a desktop GUI driver to automate applications (such as browsers, system settings, and native apps), which can perform actions including clicking, typing, and navigating. The skill's documentation explicitly discusses actions like paying, purchasing, and submitting forms, and notes that such consequential operations require explicit user approval (Authority section: "Sending, publishing, paying, purchasing, deleting, changing credentials or security settings... still need the person's explicit yes"). However, the skill itself is a GUI automation loop helper (jev-computer-use) that acts as an orchestrator/planner for desktop apps rather than embedding a direct, service-authenticated financial transfer or charging instruction itself. Therefore, it falls under indirect financial exposure (interacting with general software UIs where a user might initiate purchases or payments). Indirect financial operations are categorized as medium severity.