deepbook-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to query external documentation at runtime (e.g., the MCP server https://sui.mcp.kapa.ai and the docs at https://docs.sui.io/onchain-finance/deepbook/deepbookv3 and related docs/GitHub URLs) which the agent would fetch and use to control/compose answers, so these runtime-fetchable URLs are flagged.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a TypeScript SDK integration for DeepBook V3 on Sui explicitly designed to perform on-chain financial actions: placing limit and market orders, executing swaps, depositing/withdrawing funds, and managing BalanceManager (on-chain) objects. These are explicit crypto/blockchain financial execution capabilities (order placement, swaps, and fund movement), not generic tooling.