xapi-provider

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an API provider platform via CLI commands, including checking earnings and initiating earnings transfers (npx xapi-to earnings transfer 1 --idempotency-key <stable-operation-key> at lines 159-162), which constitutes a direct financial transfer operation. Access control is handled via scoped XAPI keys (authentication credentials) required by the CLI service, qualifying as independent access validation.