tres-wallets-upload

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask the user for API keys and secrets and then to embed those values into the GraphQL mutation's platformKeys JSON string, which requires the LLM to handle and output secret values verbatim.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to onboard on-chain wallets and exchange accounts into a financial system (Tres Finance). It collects exchange credentials including API keys and secrets (read-only is requested but secrets are still accepted/stored) and calls specific TRES MCP GraphQL mutations (updateBatchInternalAccounts) to create/update wallet and exchange accounts. These are finance-specific APIs for managing custodial/exchange links and wallet identifiers, so this qualifies as direct financial execution authority risk.