agirails-agent-payments

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading an external skill file via curl from https://market.agirails.io/skills/claude-code/skill.md, establishing an unverifiable runtime external dependency from an unofficial market domain.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly details the AGIRAILS agent payment infrastructure, which integrates crypto/blockchain wallet management (Base L2 USDC, private keys, keystores), direct escrow transactions (actp pay, client.pay()), instant payments via x402 adapters, and smart contract settlement functions. These are explicit, specialized tools and APIs for direct financial execution.