stacktree-custom-domain

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to include secrets verbatim (an Authorization: Bearer token, an email OTP example, and Stacktree's verify token) in API requests and to copy a verification token from one response into a DNS API call, which requires the LLM to handle/output secret values directly and risks exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches an "instructions" object at runtime from https://api.stacktr.ee/custom-domains which the agent must read and act on to set DNS records, so this external URL directly controls the agent's subsequent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs payments: it instructs an agent with an x402-funded wallet to purchase domains paid in USDC over x402, calls a register endpoint that "pay[s] the x402 challenge," and charges $5 via an x402 challenge to unlock Stacktree custom domains. These are specific payment/crypto transaction actions (using a crypto wallet and sending USDC) intended to move money without a human in the loop, so this is direct financial execution authority.