berry-juicer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires generating and embedding sensitive, single-use wallet signatures (and may involve API keys in signing recipes) verbatim into HTTP requests/headers (e.g., x-berry-sig / Bankr X-API-Key), which is direct secret handling/exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides APIs and workflows to move and spend real funds on-chain and via wallet signatures. It documents how to sign Ethereum personal_sign messages, submit inference requests that spend harvested USDC, and (critically) how to construct and submit on-chain deposit and withdraw transactions against specific Berry contracts on Base (chainId 8453). It includes concrete contract/asset identifiers (depositFactory, Base USDC address), signing recipes (Bankr, Privy, generic EOA), and a mandatory pre-submit checklist for building/broadcasting calldata — all of which are specific crypto/Wallet/transaction execution capabilities, not generic I/O. These are direct financial execution actions (moving token inventory and authorizing spends), so this is a direct financial execution capability.