trading-on-aborean

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch Abscan verified contract source at runtime to discover ABIs/entrypoints (e.g. https://abscan.org/address/0xE8142D2f82036B6FC1e79E4aE85cF53FBFfDC998#code), and that fetched content directly controls how the agent constructs contract.write payloads, making it a required external dependency that influences instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for on-chain financial operations (DeFi). It names concrete blockchain entrypoints and flows for swaps, liquidity provision, zaps, vault deposits/withdrawals, locks (veABX), votes, claims, and uses concrete router functions (quoteAddLiquidity, addLiquidity, addLiquidityETH, generateZapInParams, zapIn) plus factory/pool reads (getPool, getReserves). It instructs using wallet balance/token APIs, building and previewing contract.write payloads, and executing transactions with --execute. These are specific crypto transaction/asset-management capabilities (signing/sending contract writes and fund-moving flows), so it grants Direct Financial Execution Authority.