megaeth

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several URLs point to third‑party skill/install pages, a .xyz site, and personal GitHub repositories (unknown/unvetted maintainers) referenced as installation/deploy sources — these are untrusted download/install vectors that could be used to distribute code or malware.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill doc explicitly includes wallet creation from a private key, signing transactions, and sending transactions via RPC (walletClient.sendTransaction, walletClient.signTransaction + eth_sendRawTransactionSync). It shows token approvals, token swaps, bridging ETH, and ERC-7710 delegations that authorize on-chain ERC20 transfers. These are specific crypto/blockchain transaction and wallet operations (signing and submitting transactions) — i.e., direct financial execution capability.