surfpool

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README/instructions include install commands that fetch-and-execute remote code — e.g. "curl -sL https://run.surfpool.run/ | bash" and "git clone https://github.com/txtx/surfpool.git" (followed by a local install command), which are runtime operations that execute external code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes. The skill is explicitly a Solana development environment with built-in crypto operations: it exposes a "Universal Faucet" and CLI/runbook airdrop options, cheatcodes that set account lamports and token balances (surfnet_setAccount, surfnet_setTokenAccount), methods that accept and profile/send base64-encoded transactions (surfnet_profileTransaction), and IaC runbooks that define signers (secret_key) and a "svm::send_transaction" action — all of which are specific blockchain/crypto transaction and signing capabilities that can move or mint funds. This matches the "Crypto/Blockchain (Wallets, Swaps, Signing)" category for Direct Financial Execution.