botchain-dex

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's "Source constraint" and examples explicitly require fetching live documentation and backend data at runtime (e.g., https://dev-docs.botchain.ai/docs/DEX/ and the dex-wallet API such as "https://dex-wallet.botchain.ai/api/graph/price?token=0xD5452816194a3784dBa983426cCe7c122F4abd30"), so external content from these URLs will directly control the agent's outputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is an explicit DEX integration for BOT Chain (BDEX) and contains concrete on-chain execution capabilities: contract addresses (SwapRouter/Universal Router), token addresses, and example code that constructs and sends swaps (await router.swap(params)), plus approval/permit instructions and swap/LP flows. These are specific crypto transaction primitives (signing/sending swaps, managing liquidity), which constitute Direct Financial Execution authority.