skill-factory

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md, while primarily a meta-skill authoring guide, explicitly includes payment-processing flows and calls: a sample description for a PayFlow onboarding skill mentions "payment setup" and "subscription management" (lines 150-156), and the "Compliance Pre-Check" section prescribes querying sanctions APIs, a risk-engine API, and then explicitly states "ONLY after all 4 checks pass: Call payment MCP" (lines 860-884). Those lines describe calling payment-related MCP/APIs and therefore constitute explicit financial execution capability.