Fluid

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The auto-injected pre-flight installer downloads and executes remote code at runtime — notably the onchainos installer (https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh), the plugin-store launcher/update-checker (https://raw.githubusercontent.com/okx/plugin-store/main/scripts/launcher.sh and https://raw.githubusercontent.com/okx/plugin-store/main/scripts/update-checker.py) and the released plugin binary (https://github.com/okx/plugin-store/releases/download/plugins/fluid-plugin@0.1.1/... ), which are fetched during runtime and installed/executed as required dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides on-chain crypto controls: it integrates with onchainos wallet commands (login, addresses, balance) and exposes Fluid-specific write commands that can sign and broadcast transactions (supply, borrow, repay, withdraw, close) with an explicit --confirm execution mode that returns tx_hashes. The docs describe approval flows, constructing/sending operate() calls to vault contracts, dry-run vs execute modes, and even reference calling onchainos wallet contract-call. Although it includes a confirmation protocol, the skill is specifically designed to move crypto assets on-chain and therefore grants direct financial execution authority.