crypto-bd-agent

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a GitHub repository hosted under an unrecognized/individual username (not a known vendor) which can distribute source or release artifacts including executables — treat as suspicious until verified (stars, forks, maintainer reputation, signed releases, and scan results are checked).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Excluded: SKILL.md describes an internal BD workflow and trusted intelligence source categories but provides no required runtime path that ingests outsider-authored free text without first selecting specific items; the listed sources include general “web scraping” and “community” categories but no concrete queue/feed/inbox ingestion mechanism is specified.]

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes and prescribes on-chain registration and autonomous payment workflows (x402 micropayments), and references managing separate wallets and payment endpoints. Those elements indicate built-in capabilities to initiate or manage cryptocurrency payments/transactions (micropayments and on-chain registrations), which is direct financial execution functionality.