upload-and-share

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install and execute agentcash from npm and interact with endpoints on stableupload.dev, which are third-party services with unofficial provenance acting as an operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with agentcash micropayments to purchase upload slots and site hosting/renewal tiers directly via API calls (https://stableupload.dev/api/upload, https://stableupload.dev/api/site, https://stableupload.dev/api/site/renew), which execute direct financial transactions using cryptocurrency/USDC micro-payments.