controller-backend

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references a Git repository locator (https://github.com/cartridge-gg/controller-rs.git) in Cargo dependencies, but package repositories are transporters rather than publishers, and package names or URLs without independent cryptographic verification are considered weak/unknown dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly details how to integrate Cartridge Controller for executing blockchain transactions (specifically Starknet cryptocurrency and token transfers, contract deployment, and signing keys) in backend services, Node.js, Rust, and C++. This constitutes direct crypto/blockchain transaction execution capability.