phantom-wallet-mcp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The MCP is launched at runtime with the command "npx -y @phantom/mcp-server" (the package "@phantom/mcp-server"), which fetches and executes remote code via npx and is required for the skill's functionality.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides wallet control and transaction-sending tools for cryptocurrencies: it lists tools like transfer_tokens (which "builds, signs, and sends the transaction"), buy_token (can fetch swap quotes and "optionally sign and send"), and sign_transaction/sign_message. The examples show sending SOL and SPL tokens and executing swaps. These are direct crypto financial execution capabilities (building, signing, and submitting on-chain transactions).