business-logic

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes code and service calls that perform financial actions: the "Process Refund" example and service code call payment_service.issue_refund(order, amount, db) and refer to "payment transaction created". This is not mere generic browser automation or a generic HTTP caller — it's an explicit function to execute refunds (i.e., move money). Per the decision logic, that constitutes direct financial execution capability.