ai-podcast-voiceover

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents paid tool operations ("Paid tools consume prepaid credits", SKILL.md:229) using a bearer token stored in ~/.beatra/credentials.json which carries full scope including wallet:spend (SKILL.md:237). This constitutes a direct financial operation (charges/purchases using prepaid credits). Although the documentation states that the user must approve each cost card and authorize via browser OAuth flow (authorize.py), there is no documented, independent authentication or authorization mechanism enforced by the service or execution layer directly checking and blocking unapproved calls at the API/execution boundary independent of agent compliance; the skill relies on the agent following instructions ("Show the user a cost card for exactly one paid call... Wait for explicit approval", SKILL.md:116-117) and optional user prompts rather than an independent service-side confirmation check for each request.