recover-eco-funds

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill issues a runtime POST to the Circle proxy signing endpoint ${proxyUrl}/v1/w3s/user/sign/typedData (in scripts/eoa-to-sca.mjs), which is invoked during execution to request typed-data signing and thus relies on an external origin that performs/signs actions at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements on-chain fund-moving operations: it constructs and (with user confirmation) broadcasts Portal.refund calldata and performs ERC-3009/TransferWithAuthorization flows to move USDC from backing EOAs to SCAs. It requests typed-data signing, estimates and enforces fee ceilings, and includes submit flags (--submit, --confirm-intent, --confirm-transfer) for actual transaction broadcasts. These are specific crypto/blockchain payment operations (wallet signing and transaction submission), so this grants Direct Financial Execution Authority.