gem-miner

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Both links point to an unverified GitHub repo (BankrBot/skills) and an untrusted personal domain (gemminer.app) that instruct installing/executing code from an unknown source without clear community vetting, making them suspicious as potential malware distribution vectors.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides contract addresses and command examples that perform on-chain token operations: approve + stake (transfers/locks GEM), requestUnstake, withdraw, earlyWithdraw (forces withdrawal with fee), and getReward. It targets a specific token and staking contract on Base and issues transaction calls (i.e., signing/sending blockchain transactions) rather than generic queries. These are direct crypto/financial execution capabilities.