send-evm-transaction

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations by sending EVM transactions (ETH transfers and smart contract/token interactions) using eth_sendTransaction and MetaMask provider methods. Although MetaMask prompts the user for wallet approval/signing (as noted in error handling for code 4001 and connectWith), wallet UI prompts and user-approval flags do not constitute qualifying independent access control enforced by the service or execution layer as required by the guidelines. Therefore, direct payment operations without established independent system controls map to high severity.