permissioned-pools-deployer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly states that user-supplied values like the RPC endpoint ($RPC_URL) "reach a command on every step," meaning the LLM will be expected to interpolate and emit those values verbatim into shell commands (which can contain API keys), even though it forbids embedding raw signing keys.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly guides creation and broadcasting of on-chain transactions that "spend real gas" and "permanently change on-chain state." It lists concrete contract operations (createPermissionsAdapter, depositForVerification, initialize, updateSwappingEnabled, liquidity seeding) and prescribes signing/key-handling (hardware wallet --ledger, encrypted keystore, prohibition on raw signing-key flags). These are specific crypto/blockchain execution actions (wallets, signing, contract transactions), so the skill grants direct financial execution capability.