linkfox-1688-procurement

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including creating 1688 procurement orders, retrieving payment URLs, confirming receipts, and applying for invoices (create_order.py, payment_url.py, confirm_receive.py, invoice_apply.py). These financial routes rely on LinkFox platform identity (LINKFOX_AGENT_API_KEY) and script-level authorizedStores prechecks managed by backend authentication, but lack independent, execution-layer access controls validating payment execution directly on the payment routes.