onekey-swap

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to return signed PSBT details (signatures/transaction signing material), which requires outputting sensitive cryptographic signing data verbatim and thus risks secret exfiltration.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a crypto swap/execution tool. It declares ownership of swap-execute, swap-build, swap-quote, and related commands, describes a build→execute flow, supports signing/broadcasting (including sign-only PSBT for BTC), and specifies submitted/Submitted: behavior. These are direct blockchain transaction and signing operations (wallet/swaps/signing), which are specific financial execution capabilities.