actions

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill manages integrations and executes synchronization actions against external CRMs and ERPs (such as NetSuite and HubSpot) via api_write calls to run action columns, acting as an operational tool for downstream modifications. However, the available instructions do not specify any independent access control mechanisms enforced by the service layer for these write/execution operations. Therefore, it is a direct financial/operational capability without established independent access control.