cloudish

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a container deployment service on Cloudish (cloudish.ai) that consumes prepaid credits (Authorization: Bearer $CLOUDISH_API_KEY) and supports credit transfers. This constitutes an in-scope financial operation (service resource billing and credits/transfers). Because the platform authenticates requests via bearer API keys stored and managed by the agent/client without external two-factor confirmation or independent out-of-band service-layer approval gates for API actions, it represents a direct financial operation without qualifying independent access controls.