oneshot-embedded-wallet

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instantiates OWSProxy with WALLET_URL = "https://wallet.1shotapi.com/" (and references the signing path "https://wallet.1shotapi.com/signer/"), which loads remote iframe code at runtime that displays UI prompts and executes signing logic, making those URLs required runtime dependencies that control agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents embedding the 1Shot Wallet Branding Layer and exposes EIP-1193 wallet RPCs (e.g., proxy.ethereum.request / eth_requestAccounts) and signing flows (personal_sign, EIP-712, a Signing Layer at /signer/). These are explicit crypto wallet/signing capabilities that allow account access and transaction signing, i.e., direct financial execution authority.