publish-npm-package

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill assists in setting up publishing and release workflows for npm packages via GitHub Actions. Publishing a package to a public or private registry is an indirect financial operation (submitting billable/service usage or releasing public assets). However, because publishing packages to npm (or configuring CI/CD pipelines to do so) does not constitute a direct financial transfer, charge, trade, or purchase, and the instructions relate to workflow configuration and development guidance rather than executing direct financial instructions or handling financial assets, the operation type is indirect.