vend

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The Vend skill is an API integration for a point-of-sale / retail management system and explicitly exposes payment-related entities and actions (e.g., Sales Payment, Transaction Payment, Transaction Refund, Refund Payment, Invoice Payment, Gift Card, Store Credit, Customer Credit Transaction, etc.). It uses the Membrane CLI to run prebuilt actions or proxy arbitrary authenticated requests to the Vend API (including POST/PUT/PATCH/DELETE), and Membrane handles credentials so the agent can invoke those endpoints directly. Those capabilities are specifically designed to create/modify payments and refunds (i.e., execute financial operations), not just generic navigation or data viewing. Therefore this skill provides direct financial execution authority.