paperclip-api

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes. The skill exposes explicit REST/CLI operations that set and update monetary allocations: e.g. POST /api/companies/{companyId}/agent-hires with "budgetMonthlyCents", and PATCH /api/companies/{companyId} {"budgetMonthlyCents": ...} plus PATCH /api/agents/{agentId} (update budget). These are direct APIs to change budget amounts (monetary allocations) rather than just viewing—so it grants direct financial execution capability within the control plane.