alby-bitcoin-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references https://esm.sh/@getalby/bitcoin-connect and https://faucet.nwc.dev as CDN/runtime sources, but these are third-party registries and services rather than official first-party publisher repositories, making them common unofficial operational dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes tools and capabilities for crypto/blockchain and financial transactions, specifically integrating Bitcoin Lightning wallet capabilities using Nostr Wallet Connect, LNURL, and WebLN to send and receive payments, fetch wallet balances, settle HOLD invoices, and handle bitcoin transactions.