printify

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a print-on-demand service CLI that includes create-order, which initiates a direct purchase and payment charge as noted in SKILL.md:68 ("orders may trigger charges"). Although authentication is supported via token setup, there is no independent service-enforced access control validation documented for the execution layer of the order creation route itself; the auth rules describe token storage and status checking rather than execution-layer checks on the order action. Thus, it represents a direct financial operation without qualifying independent control.