scenario-3d

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents generation and execution workflows through the Scenario MCP server (model_run), noting that steps are paid and invoke plan access checks and price estimation (dry_run=true, plan restrictions, and paid steps). This represents a direct financial operation (purchasing/executing paid generation jobs). However, the instructions rely entirely on the API client/agent following the documented steps without independent access validation enforced by the execution layer for the payment route itself (as opposed to standard API tokens passed by the agent). Therefore, this direct financial operation is conducted without established qualifying independent control.