ynab

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to manage budgets via the YNAB API and includes a create-transaction endpoint (create-transaction.js) that programmatically adds transactions (income/expenses) to accounts. It requires a personal access token and exposes operations that modify financial records (balances, transactions, category budgets). This is a specific financial API integration (YNAB) that performs transaction creation rather than a generic browser/API caller, so it constitutes direct financial execution capability.