ptbs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to query the external MCP server at runtime for up-to-date answers (https://sui.mcp.kapa.ai), which would directly influence the agent's responses by injecting fetched documentation into its reasoning/output.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about constructing and executing Sui blockchain transactions (PTBs). It documents coin operations (SplitCoins, MergeCoins, TransferObjects), SDK functions for coin/gas handling (tx.splitCoins, tx.transferObjects, tx.setSender, setGasPayment/setGasBudget), signing & executing transactions, and CLI submission (sui client ptb). These are direct crypto/blockchain transaction APIs that can move value, so this is Direct Financial Execution authority.