dby-banned-words

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents a CLI tool (dby banned check) that calls a paid external API endpoint (https://doubaoya.com/api/apis/tool/check-banned-words/call) and explicitly references platform billing per invocation ("逐平台各计费一次"). This constitutes a direct financial operation (charges/paid service execution). However, the operation requires an authenticated API key (DOUBAOYA_API_KEY) and an explicit user confirmation flag (--confirm), defaulting to a safe confirmation state with zero requests until confirmed, which satisfies qualifying independent access control/authorization constraints. Therefore, it falls under the medium severity tier.