cawcut-app-run

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external npm package installation command (npm install -g @ubnt/cawcut) for CLI setup, which constitutes an inbound operational package dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill executes media generation/processing apps using the cawcut app run command, which consumes credits and executes paid generation tasks. This constitutes a direct financial operation (charges/purchases/service usage settlement). Access control is established via CLI authentication commands (cawcut auth login) and authenticated session handling enforced by the service layer.