agentic-wallet

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). This skill requires including a one-time password (OTP) verbatim in shell commands (e.g., npx awal auth verify <otp>), which instructs the agent to handle and output a secret-like value directly, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s runtime workflow can call npx awal@2.12.0 x402 bazaar search/list/details (outsider source: public CDP x402 bazaar responses) and the CLI outputs those free-form endpoint metadata/schemas into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes crypto wallet and payment commands (via the awal CLI) that perform financial actions: sending tokens, swapping/trading tokens, adding/funding (onramp/buy USDC), and paying USDC to call paid endpoints. These are specific, purpose-built financial execution capabilities (e.g., npx awal ... send, trade, x402 pay), not generic tools, so this grants direct financial execution authority.