1inch-infrastructure

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs at runtime to read file://1inch-mcp/guides/api-index as a fallback when paths 404, so it fetches external file:// content that can directly influence agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes blockchain transaction capabilities: it lists a Web3 RPC endpoint (POST /web3/{chainId}) and a "Transaction Gateway" for "Broadcast a signed raw tx" and even gives an example prompt "Broadcast this signed transaction on Base". Broadcasting signed transactions is direct execution of on-chain funds/asset transfers (crypto/blockchain transaction submission), which is a Direct Financial Execution capability.