shieldpay

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill requires installing and running the external Membrane CLI (npm install -g @membranehq/cli), which is fetched from the npm registry and executed at runtime via commands like membrane action run / membrane request, so it is a required external dependency that results in executing external code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes. The skill is a dedicated integration for Shieldpay — a payments platform — and provides explicit, actionable interfaces to that payment system. The doc describes managing "Transaction" and "Counterparty", states Shieldpay "facilitates ... transactions" and "ensuring funds are only released," and exposes Membrane CLI actions and a proxy to call Shieldpay endpoints (including POST/PUT/DELETE and running connector actions). Those capabilities are specific to a payment gateway and can create/modify/execute payment-related operations rather than being a generic automation tool. This meets the "Direct Financial Execution" criteria.