blueagent-x402

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.95). These links point to unvetted GitHub accounts, personal domains and a Telegram channel that distribute an npm CLI/skill which explicitly asks you to load your wallet private key for payments — a high‑risk vector for credential theft/malicious packages and unauthorized fund access.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow for this skill is to call external, public data sources (e.g., “live DexScreener data” for dex-flow and “live DeFiLlama data” for yield-optimizer), so the LLM context can include outsider-authored free text scraped/fetched from those sites/pages.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly crypto-financial: it targets wallets and on-chain operations (wallet quantum vulnerability scoring, wallet migration, honeypot checks, allowance audits, MEV/shield, contract trust, AML screening, wallet PnL, swaps and approvals in CLI/SDK examples). The SDK example accepts a privateKey and shows calls like ba.security.riskcheck({ action: 'swap 100 USDC' }) and the CLI/commands reference approving tokens and swaps. These are specific blockchain/crypto capabilities (wallets, swaps/approvals, allowance revocation, migration) and imply signing/executing on-chain transactions. Therefore it provides direct financial execution authority for crypto operations.