ordinals-create

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs passing a wallet private key (WIF) as a positional command-line argument (e.g., bun run ... ), which requires the LLM to handle and potentially emit the secret verbatim—an exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly constructs, signs, and broadcasts blockchain transactions using a wallet. It references wallet keys/WIF (CLI examples), createContext(wallet) and inscribe.execute, signWithBAP options, a two-transaction atomic broadcast, and requires sufficient BSV balance. Those are specific crypto transaction capabilities (wallet signing and sending), i.e., direct financial execution.