earn-hunter

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill installs an external Node CLI package (@okx_ai/okx-trade-cli@1.4.6) from an npm registry location, constituting an external runtime dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill implements monitoring, notification, and purchase-guide subscriptions for OKX earn opportunities, delegating actual subscription execution to okx-cex-earn (SKILL.md:449). It does not perform direct financial operations or transfers itself; it performs indirect billable/monitoring operations and guides users through subscription configuration, qualifying as an indirect financial scope.