walrus-memory

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly tells users to "generate a delegate key" and to "Use the key (private key hex) and accountId in the SDK", which requires handling private key material that an LLM might be asked to embed verbatim into code/commands, creating an exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly involves blockchain wallets, on-chain access control, delegate keypairs, and signing-related flows. It requires connecting a Sui wallet, generating delegate (Ed25519) keys, using private key hex and accountId in the SDK, and references a wallet-authenticated flow that prepares sponsored Sui deletion transactions. These are concrete crypto/wallet/signing capabilities (on-chain operations), which qualify as direct financial execution risk.