agent-tool

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly defines a tool, process_refund, whose execute logic calls Stripe Connect (stripe.refunds.create with a stripeAccount) to issue refunds and returns refund IDs/amounts. This is a specific payment-gateway integration that moves money (direct financial execution), and the agent has authority levels describing auto-approve vs require-approval for refunds — indicating the tool is intended to perform real financial operations.