sirikit

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes the SiriKit Payments domain and named payment intents (INSendPaymentIntent, INRequestPaymentIntent), shows intent handling/confirmation/handling flow for fulfilling requests, and even references configuring these intents in the extension plist. Those are explicit, purpose-built capabilities to trigger/send payments (i.e., move money) rather than a generic tool, so it grants direct financial execution authority.