blockfill-agent-execution

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt shows examples that require passing API keys/secrets and proxy credentials directly (e.g., bf.set_credentials(api_key="...", api_secret="...") and proxy URLs with user:pass), which would force an agent to accept and embed secret values verbatim in generated calls or code.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The skill instructs users to route signed exchange traffic through HTTP proxies (including credential-bearing URLs like http://jp:x@sc-vpn.internal:8080 and an example user:pass@proxy.example.com), which is a high-risk pattern because a proxy operator can intercept API keys, signed requests, and sensitive data or inject malicious binaries/commands.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly a crypto trading execution SDK/daemon. It supports Binance Futures and OKX Swap, accepts exchange API keys, locally signs and sends orders, and exposes a programmatic API call (bf.place(...)) to place execution tickets that result in market/maker/twap order placement. Those are direct financial execution capabilities (crypto trading / order placement).