payment-pci-security

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment connector / PCI-compliance guide. It defines and documents concrete APIs and code patterns to perform payment authorizations, captures/settlements, refunds, and direct or proxied calls to acquirer/PSP APIs (e.g., callAcquirerViaProxy, callAcquirerDirect, SecureExternalClient/ExternalClient, X-PROVIDER-Forward-To, merchant credentials). This is specifically designed to move money (authorize/payments, capture/settle, refund) rather than being a generic tool, so it grants direct financial execution capability.