passkit

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill details building client-side integrations (UI buttons, payment requests, and authorization controllers) for Apple Pay and PassKit to process real-world purchases, donations, and recurring subscriptions. While it demonstrates how to build client-side checkout flows (which is excluded from financial scope when it's just building software/UI), section SKILL.md:84-110 guides the execution of charging payments via payment gateways (PaymentGateway.charge(token: payment.token)). Because this guides application code that performs direct charges without an independent platform-enforced access control on the agent side (it relies entirely on client-side code and user authorization), it qualifies as a direct financial operation without qualifying independent access control.