dflow-kalshi-trading

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent at runtime to "Hit GET https://proof.dflow.net/verify/{address}" and use the returned { verified: boolean } to gate buy operations, which is a runtime external dependency that directly controls agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for executing market trades: it instructs how to submit buys, sells, and redemptions on Kalshi, includes concrete CLI commands (dflow trade) and HTTP endpoints (GET /order, /order-status), requires signing/submitting transactions, wallet pubkeys and DFlow API keys, and even describes sponsorship/co-signing for fees. Those are direct market-order / transaction actions (moving funds and executing trades), not generic tooling — therefore it grants direct financial execution authority.