runpod-pod-doctor

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates existing Runpod pods through tools like pod-action (stopping, restarting) and delete-pod or create-pod (terminating and recreating paid cloud compute instances). These represent direct financial-security exposure as purchases/charges/service resource operations. However, the operations are strictly gated behind user authorization ("only when the user authorizes one" / "a recovery plan is presented, not executed unless the prompt authorizes it" / "only if the user authorized an action"), functioning as an interactive workflow with user-in-the-loop validation for any state-changing actions. Because the tool execution layer and skill instructions require explicit user authorization for each operational step, it falls under medium severity due to strong external/user approval gates on direct operations.