pp-botsee

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires installing and running remote code during setup (npx -y @mvanhorn/printing-press-library install botsee --cli-only and go install github.com/mvanhorn/printing-press-library/library/marketing/botsee/cmd/botsee-pp-cli@latest), which fetches and executes external package/repository code that the skill depends on at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The CLI exposes explicit payment-related and crypto-related commands: "signup via-cc" (creates a credit-card signup token) and "signup via-usdc-token" (creates a USDC signup token). It also has billing commands (billing.update-settings to change monthly spend limits, billing.topoff-via-x402) and usage endpoints showing transaction history and auto-charge settings. These are specific financial operations (payment/crypto-related and billing controls), not just generic tooling, so the skill grants direct financial execution capabilities.