tgw

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes an explicit insecure pattern "tgw auth " (and examples of passing a token on the command line), which would require the model to accept and embed a secret token verbatim in generated commands or instructions, creating an exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a CLI for the TON blockchain with built-in commands to move funds and trade tokens: it supports sending TON and jettons (tgw transfer send, batch transfers), DEX swaps (tgw dex swap, batch orders), and agent wallets that can be deployed and used to execute transfers immediately without user approval (tgw agent deploy, tgw agent transfer, tgw agent batch). It lists supported tokens and transaction/status commands, and includes JSON output for scripting/AI integration. These are specific crypto/blockchain transaction capabilities (wallet transfers, swaps, autonomous agent wallet execution), so it provides direct financial execution authority.