volcengine-cli

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill manages Volcengine cloud resources (ECS, VPC, RDS, Redis, etc.) using the Volcengine CLI (ve), which can perform purchases, allocations, and resource provisioning (such as RunInstances, CreateDBInstance) that incur cloud charges. These operations constitute direct financial exposure (purchases/charges). While the skill documents a local safety policy and built-in confirmation rules (§2), these are agent/CLI-side confirmation flags and soft policies rather than independent service-enforced access controls on payment execution. Therefore, the direct operation runs without established qualifying independent access control.