curve-plugin

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations including token swaps, adding liquidity, and removing liquidity via Curve DEX router contracts (swap, add-liquidity, remove-liquidity). These operations execute on-chain transactions through onchainos wallet contract-call. The execution flow relies on agent instructions ("Ask user to confirm", --dry-run) and does not rely on independent access controls or authorization checks enforced by the service or execution layer at the time of payment execution.