ai-headshot-studio

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a paid hosted image generation service (Beatra) using a bearer token with wallet:spend scope, which constitutes a direct financial operation (purchasing paid tasks with prepaid credits). Authentication is handled via an OAuth device flow storing credentials in ~/.beatra/credentials.json, establishing independent access control enforced by the service layer.