cancellations-pauses-winback

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes Google Play Billing API calls that perform financial actions: purchases.subscriptionsv2.cancel (to stop renewals), purchases.subscriptionsv2.defer (to change billing/expiry), and purchases.subscriptionsv2.revoke (which triggers prorated refunds). These are specific payment/subscription management APIs (not generic browser or HTTP tooling) and can change billing status and trigger refunds — i.e., direct financial execution authority.