build-on-base

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs agents to "feed" the external AI-optimized docs to the agent at runtime (https://docs.base.org/llms.txt), which is a high-confidence runtime fetch whose content would directly control agent prompts/instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly targets crypto payment and transaction capabilities: it names a payment gateway (Base Pay — USDC, gasless), references the Base Account SDK for wallet auth (SIWB, sub-accounts), instructs use of transaction libraries (wagmi + viem), and includes server-side payment verification via getPaymentStatus() and guidance for importing wallets (cast wallet import). These are specific tools/APIs for moving value and managing crypto wallets/transactions, not generic utilities.