gang

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill package includes installation instructions and code referencing GitHub (github:gangfun/cli and https://github.com/gangfun/cli), which constitute weak/unknown/suspicious external operational dependencies fetched at runtime or setup.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill executes direct financial operations (token purchases, sales, and creation on a bonding curve via BNB Chain) using Binance Agentic Wallets (baw). These direct transactions are controlled and authorized independently by the execution layer/Binance's risk engine, requiring explicit user preview and approval workflows via authenticated wallet sessions (gang execute / Binance App confirmation).