opusclip-media-generation

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a paid media generation tool (opusclip_create_media_generation_job) that charges OpusClip credits for generating speech, music, and video clips. This constitutes a direct financial operation (purchasing/charging credits via API). Although the skill instructs the agent to ask the user for approval first, there is no independent access control (such as service-enforced authentication gating the payment or external checkout approval) documented for the payment route itself—it relies entirely on the agent following instructions ("get the user's approval before any paid call"). Therefore, it falls under direct operations without established qualifying control.