injective-trading-tokens

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides routes for transferring tokens between addresses (transfer_send) and moving tokens between bank wallets and trading subaccounts (subaccount_deposit, subaccount_withdraw), which constitute direct financial operations (transfers/asset movements). The tool parameters include an address and password supplied directly by the agent execution context, lacking independent validation or authentication enforced by the service/execution layer (the agent passes the credentials directly to the tool calls). Therefore, direct financial operations exist without established qualifying independent access control.