kya

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The repository contains runtime install paths that fetch and execute remote code: scripts and the README call https://raw.githubusercontent.com/awp-worknet/kya-skill/main/install.sh (which itself downloads release assets from https://github.com/awp-worknet/kya-skill/releases/latest/download/...), and those fetched artifacts are executed/installed at runtime as a required dependency for the skill.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs blockchain financial operations: it constructs and signs EIP‑712 payloads and issues AWPRegistry.SetRecipient and GrantDelegate transactions, and it runs delegated staking flows (kya-agent set-recipient --amount → delegated_staking_request). These commands are posted to an AWP relayer which broadcasts on-chain (Base) and result in staking/fund allocation changes. Because the skill is specifically designed to sign and request on‑chain money/stake actions (via awp-wallet and the relayer), it grants direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly recommends running a sudo command to resync the system clock ("sudo sntp -sS time.apple.com"), which asks the operator to obtain elevated privileges (and the flow includes downloading/running an install.sh), so it directs actions that can change machine state with root rights.