phone-numbers

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including purchasing phone numbers (zavu.phoneNumbers.purchase, lines 76-79) and 10DLC brand/campaign registrations that charge fees from a user's account balance (lines 254-263). These routes rely on API keys (Bearer $ZAVUDEV_API_KEY, line 130) and SDK client authentication, but lack independent execution-layer access controls or human-in-the-loop payment confirmation on the agent operations themselves, making them direct operations without established qualifying control.