wbso

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a time-tracking and reporting CLI (wbso track-time, wbso evidence, wbso upload) for logging R&D hours (WBSO) to an external service. This constitutes indirect financial operations (submitting billable usage/claims data for tax/subsidy handling). As an indirect financial operation, it does not involve direct funds movement, charges, or transfers, placing it in the indirect category. Per the evaluation rules, indirect financial operations are assessed at medium severity.