lido-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction set in SKILL.md mandates executing an unverified remote installation script (install.sh) and downloading binaries with checksum verification from an arbitrary GitHub repository (okx/onchainos-skills and okx/plugin-store), constituting a weak operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill executes direct financial operations including staking ETH, requesting withdrawals, claiming withdrawals, wrapping, and unwrapping via on-chain contract calls (onchainos wallet contract-call). These operations move and trade real cryptocurrency assets (ETH/stETH/wstETH). Access control for these direct writes relies entirely on agent-followed confirmation instructions ("Live Trading Confirmation Protocol" and manual user confirmation prompts) rather than independent cryptographic or service-level access checks enforced by the execution layer itself.