velodrome-v2-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes runtime setup scripts that download and install binary components and scripts from GitHub repositories (okx/plugin-store and okx/onchainos-skills), satisfying the operational dependency gate under weak/unknown or third-party provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct token swaps, adding/removing liquidity, and claiming rewards on Velodrome V2 via on-chain contract calls (wallet contract-call --force). These are direct financial operations (trades, transfers, settlements). Although the skill instructs the AI agent to ask the user to confirm before adding the --confirm flag, this agent-followed instruction does not constitute an independent, service-enforced access control or authentication mechanism preventing invalid or unauthorized submissions at the execution layer.