dflow-spot-trading

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill tells the agent to ask the user for a DFlow API key and to use an x-api-key on every direct HTTP request, which encourages collecting and embedding a secret value (verbatim) in requests or generated commands/scripts.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent to look up field-level docs at runtime via the DFlow docs MCP (https://pond.dflow.net/mcp), meaning external documentation fetched during execution can directly control agent responses and is treated as a required dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly for on-chain token swaps on Solana: it describes CLI/API commands to trade, returns signed-ready transactions from /order, and instructs the agent to sign, broadcast, confirm, co-sign sponsor transactions, and manage API keys and keypairs. Those are direct crypto/financial execution capabilities (wallet signing, sendRawTransaction, wallet.sendTransaction, sponsoring/co-signing), so it grants Direct Financial Execution authority.