index-bot

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct token purchases and portfolio rebalancing via delegated swap execution (SKILL.md:3, SKILL.md:99-102, SKILL.md:117-118). Control evaluation: Although the execution mode defaults to confirm requiring user prompts (SKILL.md:129-130) and delegates actual signing/broadcasting to external integrations (swap-integration and viem-integration), the skill itself defines no independent access control check (such as service-enforced authentication or transaction validation) to govern these financial routes.