bounded

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Setup includes a direct install command that pipes remote code to the shell (curl -fsSL https://get.bounded.sh/install.sh | sh), which fetches and executes code from https://get.bounded.sh/install.sh at install/runtime — a high-confidence remote-code-execution dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references payment functionality and payment gateway integration: it documents "Bounded Pay", mentions Stripe and Stripe Connect endpoints (e.g., /connect/onboard, /connect/status, /connect/checkout, /connect/session), seller onboarding, checkout, subscriptions, and platform fees. These are specific payment gateway integration details (not generic tooling), so the skill grants direct financial execution capability.