securing-agentic-ai-tool-invocation

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly defines a tool named "transfer_funds" in its tool registry (a high-impact tool requiring approval). That tool name and its placement in the allowlist indicates an explicit capability to initiate money transfers — i.e., direct financial execution authority. While the doc does not enumerate a specific payment provider API, the presence of a dedicated "transfer_funds" tool (rather than only generic browser or HTTP tooling) meets the threshold for direct financial execution risk.