zerion

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to download and install third-party packages via npm install -g @bankr/cli, which introduces an unverifiable runtime external dependency from an unofficial source (npm).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides access to crypto wallet operations such as on-chain trading (swaps, bridges, sends) and key management via a CLI. These actions constitute direct financial operations (transfers, trades, purchases). While the skill mentions signing routes such as local signing or web-app handoff (where human review can be triggered), direct cryptographic signing and local execution can occur autonomously using stored agent tokens or private keys (e.g., local signing default), lacking universally enforced independent access controls on the financial routes themselves. Therefore, it is categorized as high risk.