1am-wallet

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill constructs a FetchZkConfigProvider at runtime using new URL('/contract/your-contract', window.location.origin) and calls zkConfigProvider.getZKIR / api.getProvingProvider which fetch ZK prover/verifier assets from that URL (or equivalent hosted paths like your-server.com/), and those fetched artifacts are required at runtime to produce/execute ZK proofs—i.e., remote content directly affects execution and is a required dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes — this skill explicitly provides blockchain transaction and wallet APIs that can move value. It wires the 1AM/Lace wallet and exposes/uses specific crypto/payment operations: api.submitTransaction, api.balanceUnsealedTransaction (server-side dust-fee sponsorship), ConnectedAPI.makeTransfer(outputs), getShielded/getUnshieldedBalances, getDustBalance, signing (api.signData), and the ProofStation endpoints (prove, prove-and-balance, balance-only) with documented base URLs and API key usage. The skill also shows how to build, sign, balance, and submit deploy/call txs (createUnprovenDeployTx, createUnprovenCallTx, submitTxAsync, submitCallTx). These are concrete, purpose-built blockchain/payment operations (not generic HTTP or browser automation), so it grants Direct Financial Execution Authority.