manage-orders-and-refunds

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages event orders, refunds, group invoicing, and ticketing operations through CLI tools and a dashboard assistant (Fai). It initiates financial instructions such as issuing refunds (SKILL.md:352-357) and invoicing corporate group bookings (SKILL.md:427). Because these operations authorize and move funds or create billing instructions, it constitutes a direct/indirect financial operation. However, the operations require external validation via the Ticket Fairy dashboard/staff approval, API keys/CLI authentication, and specifically for refunds, an authorization code emailed to the organiser (SKILL.md:352-357). Consequently, independent access controls and verification mechanisms protect the financial routes.