nunchuk-coldcard-hsm

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents tools for interacting with a Coldcard hardware wallet and Nunchuk via command-line operations (ckcc sign, ckcc upload, nunchuk tx sign), signing and authorizing Bitcoin transactions (PSBTs) or setting up HSM signing policies. Signing transactions via hardware keys and PSBT tools constitutes a direct financial operation (transaction signing/settlement authorization). Physical presence or device-screen confirmation (ckcc hsm-start needs approval on the Coldcard screen) provides independent access control/validation at the device layer.