splits

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires fetching and running the Splits CLI (e.g., npm/npx install of @splits/splits-cli@0.2.9 and the referenced repo https://github.com/BankrBot/skills/tree/main/splits), which downloads and executes remote code at runtime, and it also exposes an LLM context URL (https://splits.org/llms.txt) that could be fetched to directly control model prompts.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The Splits skill explicitly provides on-chain and fiat financial execution capabilities: CLI commands to create and submit transactions (e.g., "splits transactions create transfer", "transactions create custom"), instructions to generate/register an EOA signer and use it to sign/submit transactions, support for bank USD/EUR off/on-ramps, automated swap-and-sweep and buyback automations, and an "advanced: module-based execution" mode that grants unilateral execution from a subaccount (no per-action approval). These are concrete, purpose-built financial operations (moving funds, swaps, signing transactions, bank ramps), not generic tooling—so it grants direct financial execution authority.