genlayer-intelligent-contracts

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs at runtime to "load" the official GenLayer skills from https://skills.genlayer.com/, which implies fetching external skill code that would directly influence agent instructions/behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed around on-chain authority, wallet spend supervision, and revocation of EVM delegations. It defines wallet spend snapshot fields (asset, payTo, spent, maxTotalSpend, delegator/delegate), references agents executing transactions and receipts, and specifies an ERC-7710 revocation effect (revocationController, relayer, requiredDecision) and how a decision reaches an EVM revocation controller. These are specific crypto/blockchain control interfaces (wallet spend and on-chain revocation paths) rather than generic tooling, so it provides direct financial execution/control capability within an integrated system.