Aerodrome Slipstream

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's auto-injected pre-flight steps download and execute remote installers/binaries at runtime (e.g. "https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh" which is downloaded then run with sh, "https://raw.githubusercontent.com/okx/plugin-store/main/scripts/launcher.sh" which is downloaded and made executable, and "https://github.com/okx/plugin-store/releases/download/.../aerodrome-slipstream-plugin-" which downloads a plugin binary), so external content fetched at runtime can execute code and is required for the skill.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain cryptocurrency financial operations. It exposes concrete commands that build and broadcast transactions (e.g., swap, mint-position, add-liquidity, remove-liquidity, collect-fees, burn-position) and documents that write operations execute via onchainos wallet contract-call (including approvals and tx submission). It includes preview vs execute modes, --confirm to broadcast, dry-run, and a Live Trading Confirmation Protocol for signing/broadcasting. This is direct crypto/blockchain execution capability (wallet signing and on-chain transactions), not a generic tool. Therefore it provides Direct Financial Execution Authority.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)