digift-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The pre-flight install block performs runtime downloads and executes remote installers (notably it curls and runs "https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh" and also downloads "https://github.com/okx/plugin-store/releases/download/$TAG/digift.tgz" which is then npm-installed), so remote content is fetched at runtime and executed as a required dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on blockchain financial operations: it builds unsigned on-chain transactions for subscribe/redeem/approve, computes fees/balances/allowances, outputs a standardized TxBody, and provides an explicit mapping that converts the TxBody into a pending_sign which is then routed to onchainos wallet contract-call for signing and broadcasting. It also includes an approve command (ERC20 approvals) and detailed on-chain transaction lifecycle (allowance checks, deadlines, chain/RPC usage). These are specific crypto/blockchain transaction capabilities (wallet/tx construction and integration with a signing/broadcast tool), so it grants direct financial execution authority.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)