walrus-troubleshooting

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains an explicit install command that pipes a remote script to a shell (curl -sSfL https://raw.githubusercontent.com/Mystenlabs/suiup/main/install.sh | sh), which fetches and executes remote code at runtime, and also references a git dependency (https://github.com/MystenLabs/walrus.git) in Move.toml that will be fetched during builds—both are runtime external dependencies that provide/execute remote code the workflow relies on.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit crypto/blockchain transaction and signing operations: references to wallet gas coins and obtaining SUI (sui client faucet / acquiring SUI), SDK/CLI store operations (client.walrus.storeBlob) which perform on-chain writes, configuration of upload relay tips (sendTip.max), and explicit signing requirements (tx.setSender(address) and Seal session signing). These are specific blockchain wallet/transaction/signing capabilities rather than generic tooling, so it grants direct financial execution authority.