shiftcare-basics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the execution of npx skills update shiftcare-basics which invokes an external CLI tool without a version-pinned repository locator or provenance guarantee, constituting an unverifiable runtime external dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents operational instructions for recording invoice payments via create_invoice_payment, which represents a direct financial operation (recording/processing a payment/charge settlement). However, the skill explicitly operates within an MCP (Model Context Protocol) client-server architecture where tool calls require the underlying MCP server and its authentication/authorization (credentials, permissions) to execute successfully, and line 197-203 establishes that payments use server-authenticated APIs (create_invoice_payment, list_invoice_payments, get_client_fund_balance) backed by permission scoping and account credentials. Therefore, it is a direct operation with qualifying independent service-layer authentication/access control.