openfin-relay

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations via cross-chain bridging, token swapping, and bridge+calls (POST /agent/relay/execute, relay_execute), which execute transfers and trades of funds. Although safety guidelines and confirmation prompts are documented, no independent service-enforced access control (such as server-side authentication gating the execution layer independently of agent instructions) is established for the execution route. Therefore, it falls under direct operations without qualifying independent access control.