vibenet

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These links point to an unvetted GitHub fork (and an associated gist) that the provided installer script clones/builds/links locally instead of using an official, vetted package — cloning and running code from an unknown fork is a risky distribution vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The included installer script clones and builds a remote git repository (https://github.com/chunter-cb/viem), which fetches and executes third‑party code at runtime via git clone + pnpm run build, making it a required remote code dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents blockchain RPC endpoints that accept/broadcast transactions (including 0x79 AA broadcasts and receipt polling), a hosted payer API (ERC-8168) for sponsoring gas, and a faucet POST endpoint to drip funds. It also describes creating/signing accounts and sponsored first transactions. These are specific crypto/blockchain transaction and payment capabilities (wallet/transaction broadcasting and payer integration), which constitute direct financial execution authority.