etherfi-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses curl to fetch the etherfi-plugin configuration from an external GitHub repository (https://raw.githubusercontent.com/okx/plugin-store/...), which can be influenced by outsiders if repository contents are modified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes runtime setup scripts containing curl and npx commands fetching content from external GitHub repositories (okx/plugin-store and okx/onchainos-skills) which are treated as third-party unofficial operational dependencies under the dependency gate rules.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations including staking ETH, wrapping/unwrapping tokens, and unstaking/claiming through on-chain transactions using the onchainos CLI. While instructions mention requiring a --confirm flag or TEE-sandboxed signing, these are agent-followed configuration/warning flags and client-side options rather than qualifying independent access controls enforced by the service or execution layer. Therefore, the direct payment operations lack established qualifying independent access control.