influencer-outreach

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill outlines an outreach and pipeline workflow for negotiating contracts and paying micro-influencers ("pay the base, note the deadline, and stop managing them. On day 14 after publication, re-scrape the video, lock the view count, compute the bonus, pay it"). This constitutes a direct financial operation (purchasing creator services/videos). However, the document explicitly defines access controls and safety invariants in the operating principles: "Never let an agent press send. Draft everything, send nothing. The human clicks. Enforce it in code, not in intent: send_message() takes sent_by_user=True that only the UI route sets — scripts and agents physically cannot send." Because the execution layer and codebase design enforce an independent control preventing the agent from autonomously sending messages or executing actions without human UI authorization, the direct operation has qualifying independent access control.