scenario-blender

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents tools like estimate_cost and generate (SKILL.md:56-57, 71-72) that submit paid generation jobs spending Scenario credits ("cu_cost_exact"). This constitutes a direct financial operation (purchasing/generating paid model outputs). However, the documentation specifies that generating requires user approval at multiple steps ("Tell the user the cost in CU and stop until they say yes... neither this gate nor the one in step 8 is ever passed without the user", SKILL.md:71, 75). Furthermore, the API key and secret are managed entirely within the extension's preferences on the user's local machine and never handled by the agent (SKILL.md:11). The local server itself is protected via a session-specific bearer token generated in memory on startup (SKILL.md:13, 17), satisfying the requirement for independent execution-layer access control over the local MCP bridge.