mcd-meal-adviser

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements a meal recommendation and ordering workflow for McDonald's via MCP tools, including an explicit direct ordering step (create-order in SKILL.md:151). This constitutes a direct financial operation (purchases/settlement authorization). However, the documented execution relies on external MCP tool integration requiring an authenticated user token/session (MCP Token) and explicit user confirmation ("用户确认后，用 create-order 下单" in SKILL.md:150-151), but does not itself document an independent, service-enforced access control or validation check on the payment/order route within the provided instructions (relying instead on agent instructions/confirmation flags, which do not establish independent validation according to the criteria). Therefore, it is a direct operation without established qualifying independent control.