puffer-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The injected pre-flight steps perform runtime downloads and execution of remote installers/binaries (notably https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh which is fetched and run with sh, and the GitHub release downloads under https://github.com/okx/plugin-store/releases/download/.../puffer-plugin-... which fetch the plugin binary/checksums and install it), satisfying runtime fetch + remote code execution for required dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a crypto financial plugin. It exposes write operations that sign and broadcast on-chain transactions (stake, request-withdraw, claim-withdraw, instant-withdraw) which move assets (ETH/pufETH/WETH), handle approves, send msg.value, and return tx_hashes. Writes go through onchainos wallet contract-call (signing/broadcasting) and include gas/balance checks and preview-vs--confirm broadcast semantics. These are direct blockchain financial execution capabilities (wallet interactions, contract calls, asset transfers), so it grants Direct Financial Execution Authority.