shiny-appdevicebridge

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The provided skill documentation describes Shiny.AppDeviceBridge, which includes an in-app purchases bridge (AddInAppPurchasesBridge(), IInAppPurchasesBridge) for App Store (StoreKit 2) and Google Play Billing. This is classified as a direct financial operation (purchases, settlement authorization). However, the underlying operations rely on the platform's independent access validation and built-in purchase verification workflows (StoreKit/Google Play Billing APIs) rather than custom agent-driven payment executions without independent access controls. Furthermore, the instructions explicitly guide the developer to verify purchase data against the app's server (IPurchaseVerifier) and require native store authentication/authorization layers.