ai-logo-maker

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill executes paid logo generation calls via the Beatra service (mcp.beatra.ai), consuming prepaid credits and holding wallet:spend capabilities. These are direct financial operations (purchases/charges). Authentication relies on an OAuth device flow storing a bearer token, with no independent access control (e.g., strong external/checkout-time verification) documented at the service layer for these direct tool calls.