blockchain-developer

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document is mostly benign instructional content, but it includes a Transparent Proxy example with an unrestricted upgradeTo(address) and delegatecall fallback — an explicit backdoor/RCE vector allowing arbitrary implementation replacement and remote takeover; no other signs of data exfiltration, credential theft, supply-chain tampering, or obfuscation are present.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on crypto financial operations. It includes building DeFi protocols (AMMs, lending, staking), integrating with wallets (MetaMask, WalletConnect, RainbowKit), account abstraction (ERC-4337), and concrete contract patterns that transfer ETH (withdraw pattern using msg.sender.call{value: ...}). Those are specific blockchain/crypto execution capabilities (wallet integration, signing, sending transactions), not generic tooling—so it grants direct financial execution authority.