bnbchain-mcp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running "npx @bnb-chain/mcp@latest", which fetches and executes remote npm package code at runtime (source: https://github.com/bnb-chain/bnbchain-mcp), so it has a runtime external dependency that executes remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes blockchain wallet and transaction tools that perform state-changing financial operations: transfer_native_token, transfer_erc20, transfer_nft, transfer_erc1155, approve_token_spending, write_contract, and Greenfield payment/bucket writes. It describes requiring a PRIVATE_KEY in the server env for these operations and instructs how to run the server with a PRIVATE_KEY. These are explicit crypto transaction and signing capabilities (direct financial execution), not generic tooling.